Sr. SIEM Engineer

Piper Companies; Newington (CT); On-site; USD 175,000 - 195,000; Full time

Benefits offered by this job

Medical

Dental

PTO

Paid Holidays

Additional benefits

Job summary

Zachary Piper Solutions seeks a Sr. SIEM Engineer for a classified program in Newington, VA. This 100% onsite role requires an active TS/SCI clearance and focuses on engineering, administering, and optimizing Splunk Enterprise Security.

Responsibilities include designing correlation searches, risk-based alerting, data onboarding, and collaboration with SOC teams to enhance threat detection and SIEM operations.

Qualifications

• Active TS/SCI clearance required.
• Bachelor's degree in Cybersecurity, CS, IT or related field (or equivalent experience).
• 5+ years of SIEM engineering, cybersecurity monitoring, security analytics, or Splunk administration.

Responsibilities

• Architect, deploy, administer, and optimize Splunk ES in a large-scale environment.
• Develop and maintain correlation searches, detection rules, dashboards, data models, and risk-based alerts.
• Lead data onboarding including parsing, CIM mapping, and integration of security and IT data sources.

Skills

Splunk ES

SIEM engineering

Python

Bash

PowerShell

Linux/Unix

MITRE ATT&CK

Data onboarding

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Splunk Enterprise Security

Job description

Zachary Piper Solutions is seeking a Sr. SIEM Engineer to support a classified program located in Newington, VA. This position is 100% onsite, 5 days per week, and requires an active TS/SCI clearance. The Sr. SIEM Engineer will serve as a technical expert responsible for engineering, administering, and optimizing enterprise SIEM capabilities with a focus on Splunk Enterprise Security.

Responsibilities of the Sr. SIEM Engineer include:

• Architect, deploy, administer, and optimize Splunk Enterprise Security in a large-scale enterprise environment
• Develop and maintain correlation searches, detection rules, risk-based alerting (RBA), dashboards, and data models
• Lead data onboarding efforts including parsing, normalization, CIM mapping, and integration of security and IT data sources
• Perform platform health monitoring, troubleshooting, performance tuning, upgrades, and capacity planning for Splunk infrastructure
• Collaborate with SOC, Security Engineering, and Incident Response teams to enhance threat detection, threat hunting, and SIEM operations

Qualifications for the Sr. SIEM Engineer include:

• Active TS/SCI clearance
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience)
• 5+ years of experience with SIEM engineering, cybersecurity monitoring, security analytics, or Splunk administration
• Hands-on experience with Splunk Enterprise Security, including data onboarding, event correlation, alert tuning, and detection development
• Strong knowledge of SPL, SIEM operations, MITRE ATT&CK, log management, and security monitoring
• Experience with Linux/Unix systems, networking protocols, and security technologies such as EDR, IDS/IPS, firewalls, IAM, and cloud logging
• Scripting experience with Python, Bash, or PowerShell
• Splunk certifications (Architect, Consultant, ES Admin, or similar) preferred

Compensation for the Sr. SIEM Engineer includes:

• Salary Range: $175,000 - $195,000 (depending on experience)
• Comprehensive Benefits: Medical, Dental, PTO, Paid Holidays, and additional benefits

This job opens for applications on September 21, 2026. Applications for this job will be accepted for at least 30 days from the posting date.

Keywords: Splunk Enterprise Security, Splunk ES, SIEM Engineer, Cybersecurity Engineer, Security Analytics, Threat Detection, Incident Response, Risk-Based Alerting, SPL, CIM, Data Onboarding, Splunk Architect, Detection Engineering, SOC Operations, MITRE ATT&CK, Python, Bash, PowerShell, Linux, Log Management, Security Monitoring, TS/SCI, Newington VA

#LI-CG2

#LI-ONSITE