> Markdown version of [/jobs/ext/3688790-splunk-soc-engineer](https://www.wearedevelopers.com/jobs/ext/3688790-splunk-soc-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Splunk / SOC Engineer

- **Company:** Zachary Piper
- **Location:** United States
- **Experience:** Expert
- **Salary:** $100,000.0 - $120,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cloud Computing Security, Cyber Security, Data Normalization, Intrusion Detection and Prevention, Parsing, Security Information and Event Management, Systems Integration, Data Ingestion, SC Clearance, Splunk
- **Published:** October 11, 2026
- **Apply:** https://www.careerjet.com/job/usd7157f4f2ea33bb32556d9869f2df7e2/eaa

## About the Role

Piper Companies is seeking a highly skilled Splunk Engineer / SOC Engineer to support the development and optimization of enterprise security monitoring and analytics within a fast-paced environment. This role plays a critical part in enhancing detection capabilities, improving security visibility, and driving operational efficiency through Splunk engineering and automation. This is a full-time opportunity working closely with SOC analysts, cloud teams, and engineering stakeholders hybrid 2 days a week onsite. This position requires a Secret clearance in order to be eligible., · Minimum of 5+ years of experience in SIEM engineering, security operations, or incident response environments.
· Strong proficiency with Splunk, including writing complex SPL queries and building production-grade dashboards.
· Hands-on experience with data normalization, ingestion, and troubleshooting within Splunk Enterprise or Splunk ES.
· Experience integrating and onboarding security data sources into a centralized SIEM platform.
· Familiarity with integrating tools such as AWS Security Hub or similar cloud-native security services.
· Strong understanding of Splunk knowledge objects, field extractions, lookups, and CIM normalization.
· Ability to perform effectively in high-pressure incident response situations and a willingness to participate in on-call rotations.
Compensation for the Splunk Engineer includes

## Description

· Developing, maintaining, and optimizing Splunk Security detections, dashboards, and correlation searches.
· Onboarding, parsing, normalizing, and enriching diverse security data sources into Splunk.
· Troubleshooting ingestion pipelines, forwarder connectivity, indexing issues, and search performance challenges.
· Assisting with configuration, maintenance, and troubleshooting across distributed Splunk environments.
· Leveraging data models and accelerated searches to improve detection performance and reporting efficiency.
· Collaborating with SOC analysts and engineering teams to enhance threat detection, visibility, and response workflows.
· Participating in incident response activities, including deep-dive investigations into security alerts.