> Markdown version of [/jobs/ext/2251060-siem-splunk-engineer-ts-sci-cleared](https://www.wearedevelopers.com/jobs/ext/2251060-siem-splunk-engineer-ts-sci-cleared). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SIEM/Splunk Engineer - TS/SCI Cleared - **Company:** Zachary Piper - **Location:** Newington, VA, United States - **Experience:** Expert - **Salary:** $165,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Bash Shell, Big Data, Cloud Computing, Cluster Analysis, Configuration Management, Cyber Security, Identity and Access Management, Issue Tracking Systems, Intrusion Detection and Prevention, Intrusion Detection Systems, Python (Programming Language), Networking Basics, Parsing, Performance Tuning, Windows PowerShell, Role-Based Access Control, Ansible, Security Assertion Markup Language (SAML), Security Information and Event Management, Systems Integration, Transmission Control Protocol (TCP), Scripting, Transport Layer Security, Google Cloud, Cloud Platform System, In-Plane Switching (IPS), Data Ingestion, System Availability, Mitre Att&ck, Cyber Threat Analysis, Firewalls (Computer Science), Git, Information Technology, Deployment Automation, Splunk, Security Orchestration, Automation & Response - **Published:** August 26, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9118720/siemsplunk-engineer-tssci-cleared ## About the Role * Bachelor's degree in Cybersecurity, Computer Science, IT, or related field (or equivalent experience) * 5-10+ years of hands-on experience with Splunk Enterprise and Splunk ES * Experience designing, deploying, and supporting enterprise-scale Splunk environments with clustering, high availability, and large-volume data ingestion. * Strong expertise in Splunk architecture, SPL development, dashboards, data models, CIM mapping, and search optimization. * Experience with Splunk SOAR (Phantom), security automation, and orchestration workflows. * Knowledge of SIEM operations, SOC processes, threat detection, incident response, and MITRE ATT&CK. * Experience integrating security technologies including EDR/XDR, IDS/IPS, firewalls, cloud platforms (AWS/Azure/GCP), IAM, and threat intelligence feeds. * Proficiency with Linux/Unix administration, networking fundamentals, scripting (Python, Bash, PowerShell), and automation tools such as Git and Ansible. * Experience with security hardening, RBAC, SAML, TLS/SSL certificates, and enterprise security compliance requirements. * Splunk certifications (Architect, Enterprise Admin, ES Admin, SOAR, or equivalent) strongly preferred. * Active TS/SCI Security Clearance ## Description Zachary Piper Solutions is seeking an Senior SIEM/Splunk to join a Federal Program located in Newington, VA, onsite 5 days per week. The SIEM/Splunk Engineer will serve as a subject matter expert for designing, implementing, tuning, and maintaining Splunk Enterprise and Enterprise Security to support enterprise-level security monitoring, threat detection, and incident response., * Architect, deploy, administer, and optimize Splunk Enterprise, Splunk Enterprise Security (ES), and Splunk SOAR environments. * Design and maintain scalable, highly available Splunk infrastructures, including clustering, distributed search, and large-scale data ingestion. * Configure and manage data onboarding, parsing, normalization, CIM compliance, and integrations across security, infrastructure, cloud, and application data sources. * Develop and tune correlation searches, risk-based alerting (RBA), dashboards, data models, and MITRE ATT&CK-aligned detection content. * Implement and maintain SOAR playbooks, automated response workflows, and integrations with security tools, cloud platforms, and ticketing systems. * Perform health checks, performance tuning, capacity planning, upgrades, migrations, and platform modernization initiatives. * Establish and maintain Splunk governance, RBAC, security hardening, compliance requirements, and operational standards. * Automate deployments, configuration management, and administrative tasks using Ansible, Git, Python, Bash, and PowerShell. * Collaborate with SOC and Incident Response teams to improve detection capabilities, investigation workflows, and overall security operations. * Maintain architecture documentation, operational procedures, playbooks, and technical standards., Key Words: SIEM, splunk, bash, python, powershell, aws, azure, gcp, mitre, soar, phantom, tcp, udp, upgrades, migrations, edr, fw, ids, ips, cloud logs, cim, mapping, iam, ssl, splunk enterpise, splunk es, spl, configure, manage, engineer, federal, cleared, army, navy, air force, defense, clearance, government, models, dashboards, data models, soc, sme, playbooks, architecture, scripts, scripting, incident response ## Related Videos - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem) - [Embracing the Hybrid Cloud: Unlocking Success with Ansible](https://www.wearedevelopers.com/videos/932-embracing-the-hybrid-cloud-unlocking-success-with-ansible) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)