Cybersecurity Integration Engineer

Piper Companies; United States; Hybrid; USD 120,000 - 140,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

401(k)

Job summary

Piper Companies seeks a Cybersecurity Integration Engineer to join its security operations team in RTP, NC. You will connect security tools, data sources, threat intelligence, and workflows to automate and strengthen detection, triage, and response in a hybrid environment.

The role requires 5+ years in security operations or related fields, hands-on Splunk expertise, and strong automation skills using Python and APIs; a Secret clearance is mandatory.

Qualifications

• Active Secret Clearance required.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline preferred.
• 5+ years of experience in Security Operations, Security Engineering, Splunk Engineering, or Cybersecurity Platform Integration roles.
• Experience as a SOC Analyst who transitioned into a Security Engineering or Splunk Engineering role strongly preferred.
• Hands-on experience with Splunk Enterprise with SPL development, dashboards, alerts, saved searches, indexes, KVStores, and custom app development.
• Experience developing automation and orchestration solutions using Python, APIs, and scripting to reduce manual effort and improve operational efficiency.
• Knowledge of threat intelligence lifecycle management, enrichment processes, and intelligence-sharing methodologies.

Responsibilities

• Engineer and maintain integrations between OpenCTI, Splunk, TheHive, and other security operations platforms.
• Develop and support security automation and SOAR-style workflows that improve SOC investigation, triage, escalation, and incident response processes.
• Build, maintain, and enhance Splunk security applications, dashboards, saved searches, alerts, reports, and supporting data models.
• Design and lead SOC data integrity initiatives to ensure the accuracy, completeness, and reliability of security telemetry.
• Develop alerting and reporting mechanisms to identify missing data, field mismatches, telemetry gaps, and data quality issues that may impact detection logic, threat hunting, incident response, or compliance requirements.
• Integrate security tools and data sources into Splunk to improve visibility, correlation, and operational effectiveness.

Skills

Splunk

SPL development

Python automation

APIs

Threat intelligence

Security Operations

Security engineering

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related discipline

Tools

Splunk Enterprise

OpenCTI

TheHive

Job description

Piper Companies is seeking a Cybersecurity Integration Engineer to join a leading cybersecurity operations team supporting mission-critical security initiatives. This role will be connecting security tools, data sources, threat intelligence, and workflows to create a more automated, efficient, and reliable security operations environment. This is a long-term contract position requires an active Secret Clearance within a hybrid environment located in RTP, NC.

Responsibilities of the Cybersecurity Integration Engineer include:

• Engineer and maintain integrations between OpenCTI, Splunk, TheHive, and other security operations platforms.
• Develop and support security automation and SOAR-style workflows that improve SOC investigation, triage, escalation, and incident response processes.
• Build, maintain, and enhance Splunk security applications, dashboards, saved searches, alerts, reports, and supporting data models.
• Design and lead SOC data integrity initiatives to ensure the accuracy, completeness, and reliability of security telemetry.
• Develop alerting and reporting mechanisms to identify missing data, field mismatches, telemetry gaps, and data quality issues that may impact detection logic, threat hunting, incident response, or compliance requirements.
• Integrate security tools and data sources into Splunk to improve visibility, correlation, and operational effectiveness.

Qualifications for the Cybersecurity Integration Engineer include:

• Active Secret Clearance required.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline preferred.
• 5+ years of experience in Security Operations, Security Engineering, Splunk Engineering, or Cybersecurity Platform Integration roles.
• Experience as a SOC Analyst who transitioned into a Security Engineering or Splunk Engineering role strongly preferred.
• Strong hands‑on experience with Splunk Enterprise, including SPL development, dashboards, alerts, saved searches, indexes, KVStores, and custom application development.
• Experience developing automation and orchestration solutions using Python, APIs, and scripting to reduce manual effort and improve operational efficiency.
• Knowledge of threat intelligence lifecycle management, enrichment processes, and intelligence‑sharing methodologies.

Compensation for the Cybersecurity Integration Engineer includes:

• Salary Range: $120,000 – $140,000/year
• Comprehensive Benefits: Medical, Dental, Vision, 401(k), and applicable sick leave

#HYBRID

This job is open for applications on 9/18/2026 and will remain open for at least 30 days from the posting date