Tier 3 SOC Analyst (Cleared)

Piper Companies; Raleigh (NC); On-site; USD 150,000 - 180,000; Full time

Benefits offered by this job

Health benefits

Paid time off

Paid holidays

Sick leave

Job summary

Piper Companies is seeking a Tier 3 SOC Analyst to join a leading cybersecurity and defense technology organization in RTP, North Carolina. This is a long-term, open-ended contract position requiring onsite work five days a week and an active Secret Clearance.

The role focuses on senior-level threat hunting, incident response, detection engineering, and playbook development within a high-security SOC. You will mentor junior analysts and present findings to stakeholders.

Qualifications

• Active Secret Clearance.
• 5+ years of experience as a SOC Analyst.
• Experience operating at a Tier 3 SOC level.
• Strong hands-on experience with Splunk (correlation searches, dashboards).
• Experience building detections, alerts, and SOC playbooks.

Responsibilities

• Lead advanced threat hunting activities to identify malicious activity not seen by traditional alerting.
• Investigate complex security incidents, perform root cause analysis, and provide remediation recommendations.
• Develop, tune, and maintain detection rules and use cases in Splunk.
• Create and enhance SOC playbooks, workflows, and incident response procedures.
• Analyze network, endpoint, cloud, and log data to identify IOC and TTPs.
• Collaborate with cross-functional security teams to improve monitoring coverage.

Skills

Threat hunting

Incident response

Threat intelligence

MITRE ATT&CK

Adversary tactics

Tools

Splunk

Job description

Piper Companies is seeking a Tier 3 SOC Analyst to join a leading organization within the cybersecurity and defense technology industry. The Tier 3 SOC Analyst will serve as a senior member of the Security Operations Center, leading advanced threat detection, threat hunting, incident response, and detection engineering efforts. This Tier 3 SOC Analyst position is a long term, open ended contract opportunity and requires you to work onsite 5 days per week in RTP, NC. The Tier 3 SOC Analyst requires an active Secret Clearance.

Responsibilities of the Tier 3 SOC Analyst:

• Lead advanced threat hunting activities to proactively identify malicious activity that has not been detected through traditional alerting mechanisms.
• Investigate complex security incidents, perform root cause analysis, and provide remediation recommendations.
• Develop, tune, and maintain advanced detection rules and use cases within Splunk.
• Create and enhance SOC playbooks, workflows, and incident response procedures.
• Analyze network, endpoint, cloud, and log data to identify indicators of compromise and adversary tactics, techniques, and procedures (TTPs).
• Collaborate with cross-functional security teams to improve monitoring coverage and detection capabilities.
• Mentor junior SOC analysts and provide technical leadership during high-priority investigations.
• Present findings from threat hunts and security investigations to technical and non-technical stakeholders.

Requirements of the Tier 3 SOC Analyst:

• Active Secret Clearance.
• 5+ years of experience working as a SOC Analyst in an enterprise security environment.
• Proven experience operating at a Tier 3 SOC Analyst level.
• Strong hands-on experience with Splunk, including correlation searches, dashboards, investigations, and detection engineering.
• Experience building and implementing new detections, alerts, and SOC playbooks.
• Demonstrated experience leading proactive threat hunts and articulating methodologies, findings, and outcomes.
• Strong understanding of incident response, threat intelligence, MITRE ATT&CK framework, and adversary tactics.
• Excellent communication skills with the ability to clearly explain complex threat investigations and hunt activities.

Compensation for the Tier 3 SOC Analyst:

• Salary range: $150,000 - $180,000
• Full Comprehensive Benefits: Health, Vision, Dental, PTO, Paid Holiday and Sick Leave if Required by Law.

Keywords:

Tier 3 SOC Analyst, Security Operations Center, SOC Analyst, Cybersecurity, Threat Hunting, Splunk, Detection Engineering, Incident Response, Security Monitoring, MITRE ATT&CK, SIEM, Threat Intelligence, Security Investigations, Detection Development, Playbook Development, Log Analysis, Incident Management, Blue Team, Endpoint Security, Network Security, RTP, Research Triangle Park, Advanced Persistent Threats, Security Analytics

This job opens for applications on 10/16/2026. Applications for this job will be accepted for at least 30 days from the posting date.