> Markdown version of [/jobs/ext/1251030-siem-engineer-secret-cleared](https://www.wearedevelopers.com/jobs/ext/1251030-siem-engineer-secret-cleared). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SIEM Engineer - Secret Cleared

- **Company:** Zachary Piper
- **Location:** Fulton, MD, United States
- **Experience:** Expert
- **Salary:** $115,000.0 - $125,000.0
- **Contract:** Permanent contract
- **Skills:** Cloud Computing Security, Cyber Security, Database Queries, Intrusion Detection and Prevention, Intrusion Detection Systems, Security Information and Event Management, Systems Integration, In-Plane Switching (IPS), Data Ingestion, Firewalls (Computer Science), Splunk
- **Published:** July 12, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9024220/siem-engineer-secret-cleared

## About the Role

* 5+ years of experience in cybersecurity or SIEM engineering roles

 * Active Secret security clearance (required)

 * Ability to work in a hybrid environment in Durham, NC or Fulton, MD

 * Heavy hands-on experience with Splunk, including advanced SPL query writing

 * Strong knowledge of Splunk knowledge objects, data models, and CIM normalization

 * Experience integrating security tools (EDR, IDS/IPS, firewalls, cloud security tools) into a SIEM

 * Solid background in incident response and security operations

## Description

Piper Companies is seeking a to support and enhance enterprise security monitoring for a leader in the technology industry. This role is ideal for a seasoned security professional with deep Splunk expertise, strong incident response experience, and a background integrating security tools into a centralized SIEM environment. The position is hybrid and available in either Durham, North Carolina or Fulton, Maryland.

 * Design, develop, and optimize complex Splunk SPL queries to support security monitoring and threat detection

 * Integrate multiple security tools and data sources into a centralized SIEM platform

 * Develop and manage Splunk knowledge objects, including dashboards, alerts, reports, and saved searches

 * Perform field extractions, lookups, and CIM normalization to ensure high-quality and consistent data ingestion

 * Support incident response efforts by analyzing security events and providing actionable insights

 * Collaborate with security and engineering teams to improve detection use cases and SIEM performance

 * Maintain documentation and best practices related to SIEM architecture and processes


## Related Videos

- [When React Meets Reality: Building a Real-Time Control Room for Autonomous Vehicles](https://www.wearedevelopers.com/videos/2091-when-react-meets-reality-building-a-real-time-control-room-for-autonomous-vehicles)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Dev Digest 166: Sycophancy, Zip bombs and AI Native Development](https://www.wearedevelopers.com/magazine/585-dev-digest-166-sycophancy-zip-bombs-and-ai-native-development)