Cybersecurity Integrations Engineer - Splunk & SOAR (Hybrid)

Piper Companies; United States; Hybrid; USD 120,000 - 140,000; Full time

Job summary

Piper Companies is seeking a Cybersecurity Integration Engineer to join a leading cybersecurity operations team supporting mission-critical security initiatives. This role connects security tools, data sources, threat intelligence, and workflows to create a more automated, efficient, and reliable security operations environment.

This is a long-term contract position requiring an active Secret Clearance within a hybrid environment located in RTP, NC.

Qualifications

• Bachelor’s degree in a cybersecurity or related field.
• 5+ years in Security Operations, Security Engineering, Splunk Engineering, or platform integration.
• Hands-on Splunk Enterprise experience: SPL, dashboards, alerts, saved searches, indexes, KVStores.
• Experience developing automation/orchestration using Python, APIs, scripting.
• Knowledge of threat intelligence lifecycle and enrichment processes.

Responsibilities

• Engineer and maintain integrations between OpenCTI, Splunk, TheHive, and other security platforms.
• Develop and support automation and SOAR-style workflows for SOC investigations, triage, escalation, and incident response.
• Build, maintain, and enhance Splunk security applications, dashboards, saved searches, alerts, reports, and data models.
• Lead SOC data integrity initiatives to ensure telemetry accuracy, completeness, and reliability.
• Develop alerting/reporting to identify data gaps, field mismatches, telemetry gaps, and data quality issues.
• Integrate tools and data sources into Splunk to improve visibility and operational effectiveness.

Skills

Security Operations

Splunk Engineering

Automation with Python

Threat Intelligence

Incident Response

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering

Tools

Splunk Enterprise

TheHive

OpenCTI

REST APIs

Job description

Piper Companies is seeking a Cybersecurity Integration Engineer to join a leading cybersecurity operations team supporting mission-critical security initiatives. This role connects security tools, data sources, threat intelligence, and workflows to create a more automated, efficient, and reliable security operations environment.

This is a long-term contract position requiring an active Secret Clearance within a hybrid environment located in RTP, NC.