SIEM Engineer - Secret Cleared

Piper Companies is seeking a SIEM Engineer to support and enhance enterprise security monitoring for a leader in the technology industry. This SIEM Engineer role is ideal for a seasoned security professional with deep Splunk expertise, strong incident response experience, and a background integrating security tools into a centralized SIEM environment. The position is hybrid and available in either Durham, North Carolina or Fulton, Maryland.

Responsibilities of the SIEM Engineer:

• Design, develop, and optimize complex Splunk SPL queries to support security monitoring and threat detection

• Integrate multiple security tools and data sources into a centralized SIEM platform

• Develop and manage Splunk knowledge objects, including dashboards, alerts, reports, and saved searches

• Perform field extractions, lookups, and CIM normalization to ensure high-quality and consistent data ingestion

• Support incident response efforts by analyzing security events and providing actionable insights

• Collaborate with security and engineering teams to improve detection use cases and SIEM performance

• Maintain documentation and best practices related to SIEM architecture and processes

Qualifications of the SIEM Engineer:

• 5+ years of experience in cybersecurity or SIEM engineering roles

• Active Secret security clearance (required)

• Ability to work in a hybrid environment in Durham, NC or Fulton, MD

• Heavy hands-on experience with Splunk, including advanced SPL query writing

• Strong knowledge of Splunk knowledge objects, data models, and CIM normalization

• Experience integrating security tools (EDR, IDS/IPS, firewalls, cloud security tools) into a SIEM

• Solid background in incident response and security operations

Compensation for the SIEM Engineer includes:

• Salary range: $115,000 – $125,000 depending on experience

• Comprehensive benefits package including medical, dental, vision, 401(k), and paid time off

This job opens for applications on 05/28/2026. Applications for this job will be accepted for at least 30 days from the posting date.

#LI-JN1

#LI-HYBRID