SIEM Engineer

Piper Companies is seeking a SIEM Engineer to join a growing cybersecurity operations team supporting enterprise security monitoring, threat detection, and cloud security initiatives. The SIEM Engineer will play a key role in developing advanced Splunk dashboards, security analytics, and detection content while partnering with SOC analysts and cloud teams to strengthen the organization's security posture. This position is ideal for an experienced security professional or a highly motivated SOC analyst looking to take the next step into SIEM engineering.

Responsibilities of the SIEM Engineer:

• Design, build, and enhance Splunk dashboards, reports, alerts, and detection content to improve threat visibility and operational awareness.
• Develop and tune correlation searches, analytics, and use cases to identify emerging security threats and suspicious activity.
• Integrate, normalize, and validate security data sources from on-premise and cloud environments, including AWS platforms.
• Support security investigations by partnering with SOC teams to analyze alerts, identify root causes, and improve detection coverage.
• Contribute to automation initiatives, platform optimization efforts, and continuous improvements across security monitoring operations.
  
  

Qualifications of the SIEM Engineer:

• 5 years of experience in SIEM Engineering, Security Operations, Cybersecurity, or Incident Response.
• Advanced Splunk expertise with a proven ability to create complex dashboards, searches, analytics, and reporting solutions.
• Hands-on experience with AWS configuration, cloud security monitoring, and data integrations.
• Previous Tier 2 SOC Analyst experience preferred, or demonstrated success in a security operations environment with strong technical aptitude.
• Active Secret Clearance is preferred but not required.
  
  

Compensation for the SIEM Engineer includes:

• Salary range: $115,000 - $135,000 annually
• Comprehensive benefits package including medical, dental, vision, 401(k), and PTO
• Hybrid schedule with onsite requirement two days per week (Tuesday and Thursday) in Fulton, MD
  
  

This job opens for applications on 08/30/2026. Applications for this job will be accepted for at least 30 days from the posting date.

Keywords: SIEM Engineer, Splunk, Splunk Dashboarding, Security Analytics, Detection Engineering, SOC Analyst, Tier 2 SOC, AWS, Cloud Security, Incident Response, Cybersecurity, Threat Detection, RTP, Raleigh, Fulton MD, Hybrid, Secret Clearance