SOC Analyst Tier III

Piper Companies; Durham (NC); On-site; USD 130,000 - 180,000; Full time

Benefits offered by this job

Onsite role

Comprehensive benefits

Job summary

Piper Companies is seeking a Tier 3 SOC Analyst in Durham, NC to lead advanced threat detection, incident response, and security investigations in a highly secure environment. The role requires an active Secret clearance and on-site work five days per week.

Responsibilities include guiding incident response, threat hunting, malware analysis, and mentoring junior SOC analysts while collaborating with engineering, compliance, and infrastructure teams to strengthen security posture.

Qualifications

• Active Secret clearance required.
• 5+ years in a SOC, Cyber Defense, or Incident Response role.
• Hands-on Splunk Enterprise experience for monitoring and threat detection.
• Experience investigating advanced threats and sophisticated cyber attacks.
• Familiarity with MITRE ATT&CK, threat intel, and security best practices.

Responsibilities

• Lead advanced incident response activities including threat hunting, malware analysis, and forensic investigations.
• Monitor, analyze, and respond to complex security events and alerts across enterprise environments.
• Develop custom Splunk dashboards, searches, correlations, and detection content.
• Conduct root cause analysis and provide remediation recommendations.
• Mentor junior SOC analysts and provide escalation support for high-priority incidents.
• Collaborate with engineering, infrastructure, and compliance teams to strengthen security posture.
• Develop and maintain incident response playbooks and security documentation.
• Stay current on emerging threats and industry best practices.

Skills

Splunk Enterprise

Incident response

Threat detection

Security operations

Mentoring

Education

Security+ or CISSP

Tools

SIEM

EDR

IDS/IPS

Job description

Piper Companies is seeking a Tier 3 SOC Analyst to join a leading cybersecurity and defense-focused organization in the Durham, NC area. The Tier 3 SOC Analyst will serve as a senior member of the Security Operations Center, leading advanced threat detection, incident response, and security investigations in a highly secure environment. This role requires an active Secret clearance, strong Splunk expertise, and the ability to work onsite five days per week.

Responsibilities of the Tier 3 SOC Analyst:

• Lead advanced incident response activities, including threat hunting, malware analysis, and forensic investigations.
• Monitor, analyze, and respond to complex security events and alerts across enterprise environments.
• Utilize Splunk to develop custom dashboards, searches, correlation rules, and detection content.
• Conduct root cause analysis and provide detailed recommendations for remediation and mitigation.
• Mentor junior SOC analysts and provide escalation support for high-priority security incidents.
• Collaborate with engineering, infrastructure, and compliance teams to strengthen security posture.
• Develop and maintain incident response procedures, playbooks, and security documentation.
• Stay current on emerging cyber threats, attack techniques, and industry best practices.

Qualifications of the Tier 3 SOC Analyst:

• Active Secret security clearance required.
• 5+ years of experience in a Security Operations Center (SOC), Cyber Defense, or Incident Response role.
• Strong hands-on experience with Splunk Enterprise for monitoring, alerting, and threat detection.
• Experience investigating advanced persistent threats (APTs), ransomware, and sophisticated cyber attacks.
• Knowledge of SIEM, EDR, IDS/IPS, and endpoint security technologies.
• Familiarity with MITRE ATT&CK framework, threat intelligence, and security best practices.
• Experience working within regulated or government-focused environments is highly preferred.
• Relevant certifications such as Security+, CySA+, GCIA, GCIH, CISSP, or similar are preferred.

Compensation for the Tier 3 SOC Analyst includes:

• Salary range: $130,000 - $180,000 depending on experience
• Comprehensive benefits package including medical, dental, vision, 401(k), and PTO
• Opportunity to support mission-critical cybersecurity operations

This job opens for applications on 10/09/2026. Applications for this job will be accepted for at least 30 days from the posting date.

#LI-JN1

#LI-ONSITE