Extended Expertise Engineer

Zachary Piper Solutions; Belleville (IL); On-site; USD 150,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401k Plan

PTO

Job summary

Zachary Piper Solutions is seeking an experienced Extended Expertise Engineer to support a leading enterprise cybersecurity platform. This onsite role at Scott Air Force Base, Illinois, requires an active Top Secret security clearance and focuses on deploying and operationalizing endpoint protection, XDR, and threat detection across customer environments.

You will act as a technical advisor, train users, and collaborate with product and engineering teams to maximize platform value, while

Qualifications

• Experience deploying, operationalizing, troubleshooting, and training customers on endpoint protection solutions.
• Strong understanding of cloud technologies and security use cases across AWS, Azure, and Google Cloud Platform (GCP).
• Active Top Secret security clearance and on-site work at Scott AFB, IL.
• Experience with SIEM platforms (Splunk) and XDR technologies.
• Proficiency in Python or PowerShell for automation.

Responsibilities

• Serve as the primary technical advisor for customers and deliver effective security outcomes.
• Lead endpoint protection deployments, troubleshooting, and end-user training.
• Drive customer success by guiding deployments and expanding product adoption.
• Collaborate with product and engineering teams to resolve issues and maximize platform capabilities.
• Perform security operations activities including incident response, threat hunting, and detection engineering.
• Support log ingestion and parsing into SIEM/XDR platforms.
• Troubleshoot networking, endpoint, cloud, and OS issues; use scripting for automation.

Skills

Endpoint protection

Threat hunting

Detection engineering

XDR

Incident response

SOC Analyst

SOC Manager

Cloud security

Python

PowerShell

Machine learning in cybersecurity

Customer facing

Onsite work

Tools

Splunk

XDR

Cortex XDR

XQL

SQL

Job description

Zachary Piper Solutions is seeking an experienced an Extended Expertise Engineer to support a leading enterprise cybersecurity platform known for next-generation firewalls, cloud security, zero trust, and AI-driven threat detection. This is an onsite position located at Scott Air Force Base in Illinois & requires an active Top Secret security clearance.

The Extended Expertise Engineer is an integral part of our client's mission within their Professional Services team. As an Extended Expertise Engineer, you will work on-site/remote with the client's customer(s) supporting their mission to help them quickly and completely adopt their End Pointy Platform, leaving them more secure. This is a highly technical, hands-on role and you will develop and maintain expert-level skill sets on the products and solutions deployed within the customer's environment.

Responsibilities of the Extended Expertise Engineer:

• Serve as the primary technical advisor for customers, understanding their business requirements, security objectives, and industry-specific threat landscape to deliver effective security outcomes.
• Lead endpoint protection deployments, operationalization, troubleshooting, optimization, and end-user training to ensure successful adoption and long-term value.
• Drive customer success by providing deployment guidance, accelerating time-to-value, expanding product adoption through new features and innovative use cases, and serving as the product subject matter expert throughout the customer lifecycle.
• Partner with product and engineering teams to resolve technical issues, provide customer feedback, and maximize platform capabilities for customers and partners.
• Perform security operations activities including incident response, threat hunting, detection engineering, alert tuning, custom BIOC development, correlation rule creation, and onboarding new log sources into XDR platforms.
• Support log ingestion, parsing, and integration efforts while leveraging SIEM and XDR technologies to improve detection and response capabilities.
• Troubleshoot networking, endpoint, cloud, and operating system issues across enterprise environments, utilizing scripting and automation where appropriate.

Qualifications for the Extended Expertise Engineer:

• Experience deploying, operationalizing, troubleshooting, and training customers on endpoint protection solutions, with a background as a Security Incident Responder, SOC Analyst, or SOC Manager in customer-facing environments.
• Strong understanding of cloud technologies and security use cases across AWS, Azure, and Google Cloud Platform (GCP), as well as enterprise security products, IT infrastructure, networking fundamentals (TCP/IP, OSI Model), and basic Linux administration and troubleshooting.
• Hands-on experience with threat hunting, detection engineering, alert tuning, custom BIOC development, correlation rule creation, XDR log ingestion and parsing, SIEM platforms (e.g., Splunk), XDR APIs, and query languages such as XQL, SQL, or similar.
• Experience analyzing customer requirements, guiding technical deployments, accelerating product adoption, and serving as a trusted technical advisor throughout the customer lifecycle.
• Familiarity with machine learning applications in cybersecurity and experience developing or maintaining automation scripts in Python or PowerShell.
• Active Top Secret security clearance.
• Ability and willingness to work onsite at Scott AFB, IL.

Compensation for the Extended Expertise Engineer:

• Salary Range: $150,000 - $170,000 *depending on experience*
• Comprehensive Benefits: Medical, Dental, Vision, 401k Plan, PTO, Holidays, Sick Leave if required by law

This job opens for applications on 08/6. Applications for this job will be accepted for at least 30 days from the posting date.

#LI-MS1

#LI-ONSITE

Keywords: Endpoint Protection, Endpoint Security, EDR, XDR, Cortex XDR, Security Incident Response, Incident Responder, SOC Analyst, SOC Manager, Threat Hunting, Detection Engineering, BIOCs, Behavioral Indicators of Compromise, Alert Tuning, Correlation Rules, Log Ingestion, Log Parsing, SIEM, Splunk, XQL, SQL, XDR APIs, Cloud Security, AWS, Azure, Google Cloud Platform, GCP, TCP/IP, OSI Model, Network Troubleshooting, Linux Administration, Python, PowerShell, Machine Learning, Customer Facing, Professional Services, Technical Consultant, Technical Advisor, Product SME, Product Adoption, Endpoint Deployment, Enterprise Security, Zero Trust, Next-Generation Firewall, NGFW, Palo Alto Networks, Cortex, Cybersecurity, Active TS/SCI, TS/SCI Clearance, Omaha, Nebraska