Sr. SIEM Engineer

Zachary Piper Solutions; Newington, Northern (VA, KY); Hybrid; USD 175,000 - 195,000; Full time

Benefits offered by this job

Medical

Dental

Paid Time Off

Paid Holidays

Job summary

Zachary Piper Solutions in Newington, VA seeks a Sr. SIEM Engineer to lead Splunk Enterprise Security architecture for a classified program.

This 100% onsite role requires active TS/SCI clearance and a hands-on expert capable of designing, deploying, and optimizing enterprise SIEM capabilities. You'll develop correlation searches, alerts, dashboards, data onboarding, and coordinate with SOC and Incident Response to strengthen threat detection.

Qualifications

• Active TS/SCI clearance is required.
• Bachelor's degree in Cybersecurity, CS, IT or related field (or equivalent experience).
• 5+ years of SIEM engineering, cybersecurity monitoring, or Splunk administration.
• Hands-on Splunk ES experience: data onboarding, event correlation, alerting, detection development.
• Strong knowledge of SPL, log management, MITRE ATT&CK, and security monitoring.

Responsibilities

• Architect, deploy and optimize Splunk ES in a large-scale environment.
• Develop correlation searches, detection rules, dashboards, and data models.
• Lead data onboarding including parsing, CIM mapping, and integration of security and IT data sources.
• Health monitoring, performance tuning, upgrades, and capacity planning for Splunk.
• Collaborate with SOC, Security Engineering, and Incident Response teams.

Skills

Active TS/SCI clearance

Scripting

Security analytics

Threat detection

Education

Bachelor's degree in Cybersecurity/CS/IT or related field

Tools

Splunk Enterprise Security

SPL

Python

Bash

PowerShell

Linux/Unix

EDR

IDS/IPS

firewalls

cloud logging

Job description

Zachary Piper Solutions is seeking a Sr. SIEM Engineer to support a classified program located in Newington, VA. This position is 100% onsite, 5 days per week, and requires an active TS/SCI clearance. The Sr. SIEM Engineer will serve as a technical expert responsible for engineering, administering, and optimizing enterprise SIEM capabilities with a focus on Splunk Enterprise Security.

Responsibilities of the Sr. SIEM Engineer include:

• Architect, deploy, administer, and optimize Splunk Enterprise Security in a large-scale enterprise environment
• Develop and maintain correlation searches, detection rules, risk-based alerting (RBA), dashboards, and data models
• Lead data onboarding efforts including parsing, normalization, CIM mapping, and integration of security and IT data sources
• Perform platform health monitoring, troubleshooting, performance tuning, upgrades, and capacity planning for Splunk infrastructure
• Collaborate with SOC, Security Engineering, and Incident Response teams to enhance threat detection, threat hunting, and SIEM operations

Qualifications for the Sr. SIEM Engineer include:

• Active TS/SCI clearance
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience)
• 5+ years of experience with SIEM engineering, cybersecurity monitoring, security analytics, or Splunk administration
• Hands-on experience with Splunk Enterprise Security, including data onboarding, event correlation, alert tuning, and detection development
• Strong knowledge of SPL, SIEM operations, MITRE ATT&CK, log management, and security monitoring
• Experience with Linux/Unix systems, networking protocols, and security technologies such as EDR, IDS/IPS, firewalls, IAM, and cloud logging
• Scripting experience with Python, Bash, or PowerShell
• Splunk certifications (Architect, Consultant, ES Admin, or similar) preferred

Compensation for the Sr. SIEM Engineer includes:

• Salary Range: $175,000 - $195,000 (depending on experience)
• Comprehensive Benefits: Medical, Dental, PTO, Paid Holidays, and additional benefits

This job opens for applications on September 21, 2026. Applications for this job will be accepted for at least 30 days from the posting date.

Keywords: Splunk Enterprise Security, Splunk ES, SIEM Engineer, Cybersecurity Engineer, Security Analytics, Threat Detection, Incident Response, Risk-Based Alerting, SPL, CIM, Data Onboarding, Splunk Architect, Detection Engineering, SOC Operations, MITRE ATT&CK, Python, Bash, PowerShell, Linux, Log Management, Security Monitoring, TS/SCI, Newington VA

#LI-CG2

#LI-ONSITE