Cybersecurity Engineer - SOC Automation & Splunk

Zachary Piper Solutions; Northern (KY); Hybrid; USD 120,000 - 140,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k)

Job summary

Piper Companies seeks a Cybersecurity Integration Engineer to join a leading security operations team, focusing on connecting tools, data sources, threat intelligence, and workflows to automate and strengthen security operations. The role requires an active Secret Clearance and a hybrid work environment in RTP, NC.

Responsibilities include building integrations (OpenCTI, TheHive, Splunk), developing SOAR-style automation, and enhancing Splunk dashboards and data models to improve detection,

Qualifications

• Active Secret clearance required.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related discipline preferred.
• 5+ years of experience in Security Operations, Security Engineering, Splunk Engineering, or Cybersecurity Platform Integration roles.
• Experience as a SOC Analyst who transitioned into a Security Engineering or Splunk Engineering role strongly preferred.
• Strong hands-on experience with Splunk Enterprise, including SPL, dashboards, alerts, saved searches, indexes, KVStores, and custom apps.
• Experience developing automation and orchestration solutions using Python, APIs, and scripting.
• Knowledge of threat intelligence lifecycle management, enrichment processes, and intelligence-sharing methodologies.

Responsibilities

• Engineer and maintain integrations between OpenCTI, Splunk, TheHive, and other security operations platforms.
• Develop and support security automation and SOAR-style workflows for SOC investigations, triage, escalation, and incident response.
• Build, maintain, and enhance Splunk security applications, dashboards, saved searches, alerts, reports, and data models.
• Design and lead SOC data integrity initiatives to ensure telemetry accuracy and reliability.
• Develop alerting and reporting mechanisms to identify data quality issues affecting detection, threat hunting, or compliance.
• Integrate security tools and data sources into Splunk to improve visibility and operational effectiveness.

Skills

Splunk Engineering

Security Operations

Python automation

SOAR workflows

Threat intelligence

Education

Bachelor’s degree in Cybersecurity

Tools

Splunk Enterprise

TheHive

OpenCTI

Job description

Piper Companies seeks a Cybersecurity Integration Engineer to join a leading security operations team, focusing on connecting tools, data sources, threat intelligence, and workflows to automate and strengthen security operations. The role requires an active Secret Clearance and a hybrid work environment in RTP, NC.

Responsibilities include building integrations (OpenCTI, TheHive, Splunk), developing SOAR-style automation, and enhancing Splunk dashboards and data models to improve detection,