Senior Splunk Engineer

Piper Companies is looking to fill the role of Senior Splunk Engineer for a Cloud and Technology company located in Morrisville, NC. The Senior Splunk Engineer will design, implement, optimize, and maintain enterprise-scale Splunk environments.

Senior Splunk Engineer role is onsite 5 days a week in Morrisville, NC.

• Design and implement scalable, highly available Splunk architectures across on-premises, cloud, and hybrid environments, including index strategies, clustering, and data retention policies
• Lead the installation, configuration, and ongoing administration of Splunk Enterprise and Splunk Enterprise Security, managing core components such as indexers, search heads, forwarders, and cluster infrastructure
• Optimize data ingestion, parsing, indexing, and search performance while onboarding new data sources and ensuring data quality, normalization, and platform reliability
• Develop and maintain SIEM capabilities, including use cases, correlation searches, alerts, dashboards, and threat detection aligned to frameworks such as MITRE ATT&CK
• Partner with SOC and security teams to support threat hunting and incident investigations, while establishing governance standards, best practices, and automation for Splunk operations

• 5+ years of experience in Splunk Engineering/Architecture with a focus on backend infrastructure (not dashboard development)
• Active Secret Clearance required; must work onsite in RTP five days per week
• Strong expertise designing and managing scalable Splunk environments, including clustering, data retention, and system performance
• Hands-on experience with Splunk Enterprise/Enterprise Security, including data ingestion, parsing, and platform optimization
• Experience supporting security operations, including SIEM engineering, threat detection, and collaboration with SOC teams

• $140,000-$180,000
• Benefits:
  Medical, Dental, Vision, 401k, PTO, Sick leave if required by law, and Holidays

This job opens for applications on 7/23/26. Applications for this job will be accepted for at least 30 days from the posting date.

#ONSITE