Zachary Piper Solutions is seeking a
Sr. SIEM Engineer to support a classified program located in
Newington, VA. This position is 100% onsite, 5 days per week, and requires an active
TS/SCI clearance. The Sr. SIEM Engineer will serve as a technical expert responsible for engineering, administering, and optimizing enterprise SIEM capabilities with a focus on Splunk Enterprise Security.
Responsibilities of the Sr. SIEM Engineer include:- Architect, deploy, administer, and optimize Splunk Enterprise Security in a large-scale enterprise environment
- Develop and maintain correlation searches, detection rules, risk-based alerting (RBA), dashboards, and data models
- Lead data onboarding efforts including parsing, normalization, CIM mapping, and integration of security and IT data sources
- Perform platform health monitoring, troubleshooting, performance tuning, upgrades, and capacity planning for Splunk infrastructure
- Collaborate with SOC, Security Engineering, and Incident Response teams to enhance threat detection, threat hunting, and SIEM operations
Qualifications for the Sr. SIEM Engineer include:- Active TS/SCI clearance
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience)
- 5+ years of experience with SIEM engineering, cybersecurity monitoring, security analytics, or Splunk administration
- Hands-on experience with Splunk Enterprise Security, including data onboarding, event correlation, alert tuning, and detection development
- Strong knowledge of SPL, SIEM operations, MITRE ATT&CK, log management, and security monitoring
- Experience with Linux/Unix systems, networking protocols, and security technologies such as EDR, IDS/IPS, firewalls, IAM, and cloud logging
- Scripting experience with Python, Bash, or PowerShell
- Splunk certifications (Architect, Consultant, ES Admin, or similar) preferred
Compensation for the Sr. SIEM Engineer includes:- Salary Range: $175,000 - $195,000 (depending on experience)
- Comprehensive Benefits: Medical, Dental, PTO, Paid Holidays, and additional benefits
This job opens for applications on September 21, 2026. Applications for this job will be accepted for at least 30 days from the posting date.
Keywords: Splunk Enterprise Security, Splunk ES, SIEM Engineer, Cybersecurity Engineer, Security Analytics, Threat Detection, Incident Response, Risk-Based Alerting, SPL, CIM, Data Onboarding, Splunk Architect, Detection Engineering, SOC Operations, MITRE ATT&CK, Python, Bash, PowerShell, Linux, Log Management, Security Monitoring, TS/SCI, Newington VA
#LI-CG2
#LI-ONSITE
