> Markdown version of [/jobs/ext/1332877-splunk-soc-engineer](https://www.wearedevelopers.com/jobs/ext/1332877-splunk-soc-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Splunk / SOC Engineer - **Company:** Zachary Piper - **Location:** United States - **Experience:** Expert - **Salary:** $100,000.0 - $120,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Cloud Computing Security, Cyber Security, Data Normalization, Intrusion Detection and Prevention, Parsing, Security Information and Event Management, Systems Integration, Data Ingestion, Splunk - **Published:** July 18, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9039705/splunk-soc-engineer ## About the Role · Minimum of 5+ years of experience in SIEM engineering, security operations, or incident response environments. · Strong proficiency with Splunk, including writing complex SPL queries and building production-grade dashboards. · Hands-on experience with data normalization, ingestion, and troubleshooting within Splunk Enterprise or Splunk ES. · Experience integrating and onboarding security data sources into a centralized SIEM platform. · Familiarity with integrating tools such as AWS Security Hub or similar cloud-native security services. · Strong understanding of Splunk knowledge objects, field extractions, lookups, and CIM normalization. · Ability to perform effectively in high-pressure incident response situations and a willingness to participate in on-call rotations. ## Description is seeking a highly skilled to support the development and optimization of enterprise security monitoring and analytics within a fast-paced environment. This role plays a critical part in enhancing detection capabilities, improving security visibility, and driving operational efficiency through Splunk engineering and automation. This is a full-time opportunity working closely with SOC analysts, cloud teams, and engineering stakeholders hybrid . · Developing, maintaining, and optimizing Splunk Security detections, dashboards, and correlation searches. · Onboarding, parsing, normalizing, and enriching diverse security data sources into Splunk. · Troubleshooting ingestion pipelines, forwarder connectivity, indexing issues, and search performance challenges. · Assisting with configuration, maintenance, and troubleshooting across distributed Splunk environments. · Leveraging data models and accelerated searches to improve detection performance and reporting efficiency. · Collaborating with SOC analysts and engineering teams to enhance threat detection, visibility, and response workflows. · Participating in incident response activities, including deep-dive investigations into security alerts. ## Related Videos - [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Building a Compiler with C#](https://www.wearedevelopers.com/videos/116-building-a-compiler-with-c) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)