Cybersecurity Integration Engineer - 174712

Zachary Piper Solutions; Northern (KY); Hybrid; USD 120,000 - 140,000; Part time

Benefits offered by this job

Medical, Dental, Vision

401(k)

Sick leave

Job summary

Piper Companies is seeking a Cybersecurity Integration Engineer to join a leading security operations team. This long-term contract role supports mission-critical security initiatives in a hybrid environment located in RTP, NC, and requires an active Secret Clearance.

You will engineer integrations between OpenCTI, Splunk, TheHive, and other platforms; develop automation and SOAR-style workflows; build Splunk apps, dashboards, and data models; and lead data integrity efforts to ensure telemetry

Qualifications

• Active Secret Clearance required.
• Bachelor's degree in related discipline preferred.
• 5+ years in Security Operations, Security Engineering, Splunk Engineering, or Cybersecurity Platform Integration roles.
• SOC Analyst turned Security Engineer or Splunk Engineer preferred.
• Strong hands-on Splunk Enterprise with SPL, dashboards, alerts, searches, indexes, KVStore, and custom apps.
• Automation/orchestration using Python, APIs, and scripting to improve efficiency.
• Knowledge of threat intelligence lifecycle management and sharing methodologies.

Responsibilities

• Engineer and maintain integrations between OpenCTI, Splunk, TheHive, and other SOC platforms.
• Develop automation and SOAR-style workflows to improve investigation, triage, escalation, and incident response.
• Build, maintain, and enhance Splunk security applications, dashboards, saved searches, alerts, reports, and data models.
• Lead SOC data integrity initiatives ensuring telemetry accuracy, completeness, and reliability.
• Develop alerting and reporting to identify data quality issues impacting detection and compliance.
• Integrate security tools and data sources into Splunk to improve visibility and operations.

Skills

Secret Clearance

Security Operations

Security Engineering

Splunk Engineering

Automation & Orchestration

Python

Threat Intelligence

Education

Bachelor's degree

Tools

Splunk Enterprise

SPL Development

REST APIs

Job description

Piper Companies is seeking a Cybersecurity Integration Engineer to join a leading cybersecurity operations team supporting mission‑critical security initiatives. This role will be connecting security tools, data sources, threat intelligence, and workflows to create a more automated, efficient, and reliable security operations environment. This is a long-term contract position requires an active Secret Clearance within a hybrid environment located in RTP, NC.

Responsibilities of the Cybersecurity Integration Engineer include:

• Engineer and maintain integrations between OpenCTI, Splunk, TheHive, and other security operations platforms.
• Develop and support security automation and SOAR-style workflows that improve SOC investigation, triage, escalation, and incident response processes.
• Build, maintain, and enhance Splunk security applications, dashboards, saved searches, alerts, reports, and supporting data models.
• Design and lead SOC data integrity initiatives to ensure the accuracy, completeness, and reliability of security telemetry.
• Develop alerting and reporting mechanisms to identify missing data, field mismatches, telemetry gaps, and data quality issues that may impact detection logic, threat hunting, incident response, or compliance requirements.
• Integrate security tools and data sources into Splunk to improve visibility, correlation, and operational effectiveness.

Qualifications for the Cybersecurity Integration Engineer include:

• Active Secret Clearance required.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline preferred.
• 5+ years of experience in Security Operations, Security Engineering, Splunk Engineering, or Cybersecurity Platform Integration roles.
• Experience as a SOC Analyst who transitioned into a Security Engineering or Splunk Engineering role strongly preferred.
• Strong hands‑on experience with Splunk Enterprise, including SPL development, dashboards, alerts, saved searches, indexes, KVStores, and custom application development.
• Experience developing automation and orchestration solutions using Python, APIs, and scripting to reduce manual effort and improve operational efficiency.
• Knowledge of threat intelligence lifecycle management, enrichment processes, and intelligence‑sharing methodologies.

Compensation for the Cybersecurity Integration Engineer includes:

• Salary Range: $120,000 - $140,000/year
• Comprehensive Benefits: Medical, Dental, Vision, 401(k), and applicable sick leave

Keywords: Secret Clearance, SOC Analyst, Security Engineer, Splunk Engineer, Splunk Enterprise, SPL, Splunk Dashboards, Splunk Alerts, Security Tool Integration, OpenCTI, TheHive, Threat Intelligence, Threat Intelligence Integration, Security Automation, SOAR, Incident Response, Detection Engineering, Threat Hunting, Security Operations Center (SOC), Python, API Integrations, REST APIs, Workflow Automation, Security Analytics, Data Integrity Monitoring, Security Telemetry, Data Quality Assurance, SIEM, Security Monitoring, Log Analysis, Platform Engineering, Cybersecurity, Security Operations, Investigation Automation, Case Management, Security Orchestration, Event Correlation, Custom Splunk Applications, Security Data Pipelines, Telemetry Validation, Enterprise Security.