> Markdown version of [/jobs/ext/2208498-siem-engineer](https://www.wearedevelopers.com/jobs/ext/2208498-siem-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SIEM Engineer

- **Company:** Zachary Piper
- **Location:** Raleigh, NC, United States
- **Experience:** Expert
- **Salary:** $115,000.0 - $135,000.0
- **Contract:** Permanent contract
- **Skills:** Cloud Computing Security, Cyber Security, Data Normalization, Information Model, Intrusion Detection and Prevention, Intrusion Detection Systems, Security Information and Event Management, Systems Integration, In-Plane Switching (IPS), Firewalls (Computer Science), Splunk
- **Published:** August 24, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9103117/siem-engineer

## About the Role

* Minimum of 5 years of experience in cybersecurity, security operations, or SIEM engineering
 * Active Secret security clearance is required
 * Ability to work in a hybrid capacity from Durham, NC, or Fulton, MD
 * Extensive hands-on experience with Splunk, including advanced SPL query development and optimization
 * Strong understanding of Splunk knowledge objects, data models, and Common Information Model (CIM) normalization
 * Experience integrating security technologies such as EDR, IDS/IPS, firewalls, and cloud security solutions into SIEM platforms
 * Proven incident response and security operations experience

## Description

* Build, enhance, and maintain advanced Splunk SPL queries to support security analytics, monitoring, and threat detection initiatives
 * Integrate and onboard security tools and data sources into a centralized SIEM environment
 * Create, manage, and optimize Splunk knowledge objects, including dashboards, alerts, reports, and saved searches
 * Configure field extractions, lookups, and CIM-compliant data normalization to improve data quality and consistency
 * Assist in incident response activities through the investigation and analysis of security events, providing actionable recommendations
 * Partner with security and engineering stakeholders to develop detection content and improve overall SIEM effectiveness
 * Document SIEM configurations, processes, and best practices to support operational excellence


## Related Videos

- [OPC UA Updates and Trends](https://www.wearedevelopers.com/videos/1215-opc-ua-updates-and-trends)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)