Extended Expertise Engineer

Piper Companies; Illinois; On-site; USD 150,000 - 170,000; Full time

Job summary

Zachary Piper Solutions seeks an experienced Extended Expertise Engineer to support a leading cybersecurity platform at Scott AFB, IL. The role combines hands-on deployment, advisory responsibilities, and advanced security operations in a customer-facing environment.

Qualifications include endpoint protection expertise, cloud security knowledge across AWS/Azure/GCP, and hands-on work with SIEM (Splunk) and XDR. An active TS/SCI clearance is required for onsite work at Illinois bases.

Qualifications

• Experience deploying endpoint protection in customer environments.
• Strong cloud security knowledge across AWS, Azure and GCP.
• Hands-on threat hunting, detection engineering and BIOCs.
• Familiarity with SIEM (Splunk) and XDR tooling is expected.
• Active Top Secret security clearance and ability to work onsite.

Responsibilities

• Serve as primary technical advisor for customers and align security objectives.
• Lead endpoint protection deployments, troubleshooting, and user training.
• Drive customer success by guiding deployments and expanding product use.
• Collaborate with product/engineering to address issues and feedback.
• Conduct security operations incl. incident response, threat hunting, and tuning.

Skills

Endpoint protection

EDR

XDR

Threat hunting

Detection engineering

BIOCs

Correlation rules

SIEM

Splunk

Python

PowerShell

Machine Learning

Zero Trust

Cloud security

Onsite work

Tools

Splunk

XDR APIs

Linux administration

Job description

Zachary Piper Solutions is seeking an experienced an Extended Expertise Engineer to support a leading enterprise cybersecurity platform known for next-generation firewalls, cloud security, zero trust, and AI-driven threat detection. This is an onsite position located at Scott Air Force Base in Illinois & requires an active Top Secret security clearance.

The Extended Expertise Engineer is an integral part of our client's mission within their Professional Services team. As an Extended Expertise Engineer, you will work on-site/remote with the client's customer(s) supporting their mission to help them quickly and completely adopt their End Pointy Platform, leaving them more secure. This is a highly technical, hands‑on role and you will develop and maintain expert‑level skill sets on the products and solutions deployed within the customer's environment.

Responsibilities of the Extended Expertise Engineer

• Serve as the primary technical advisor for customers, understanding their business requirements, security objectives, and industry‑specific threat landscape to deliver effective security outcomes.
• Lead endpoint protection deployments, operationalization, troubleshooting, optimization, and end‑user training to ensure successful adoption and long‑term value.
• Drive customer success by providing deployment guidance, accelerating time‑to‑value, expanding product adoption through new features and innovative use cases, and serving as the product subject matter expert throughout the customer lifecycle.
• Partner with product and engineering teams to resolve technical issues, provide customer feedback, and maximize platform capabilities for customers and partners.
• Perform security operations activities including incident response, threat hunting, detection engineering, alert tuning, custom BIOC development, correlation rule creation, and onboarding new log sources into XDR platforms.
• Support log ingestion, parsing, and integration efforts while leveraging SIEM and XDR technologies to improve detection and response capabilities.
• Troubleshoot networking, endpoint, cloud, and operating system issues across enterprise environments, utilizing scripting and automation where appropriate.

Qualifications for the Extended Expertise Engineer

• Experience deploying, operationalizing, troubleshooting, and training customers on endpoint protection solutions, with a background as a Security Incident Responder, SOC Analyst, or SOC Manager in customer‑facing environments.
• Strong understanding of cloud technologies and security use cases across AWS, Azure, and Google Cloud Platform (GCP), as well as enterprise security products, IT infrastructure, networking fundamentals (TCP/IP, OSI Model), and basic Linux administration and troubleshooting.
• Hands‑on experience with threat hunting, detection engineering, alert tuning, custom BIOC development, correlation rule creation, XDR log ingestion and parsing, SIEM platforms (e.g., Splunk), XDR APIs, and query languages such as XQL, SQL, or similar.
• Experience analyzing customer requirements, guiding technical deployments, accelerating product adoption, and serving as a trusted technical advisor throughout the customer lifecycle.
• Familiarity with machine learning applications in cybersecurity and experience developing or maintaining automation scripts in Python or PowerShell.
• Active Top Secret security clearance.
• Ability and willingness to work onsite at Scott AFB, IL.

Compensation for the Extended Expertise Engineer

• Salary Range: $150,000 - $170,000 *depending on experience*
• Comprehensive Benefits: Medical, Dental, Vision, 401k Plan, PTO, Holidays, Sick Leave if required by law

#LI-MS1

#LI-ONSITE

Keywords: Endpoint Protection, Endpoint Security, EDR, XDR, Cortex XDR, Security Incident Response, Incident Responder, SOC Analyst, SOC Manager, Threat Hunting, Detection Engineering, BIOCs, Behavioral Indicators of Compromise, Alert Tuning, Correlation Rules, Log Ingestion, Log Parsing, SIEM, Splunk, XQL, SQL, XDR APIs, Cloud Security, AWS, Azure, Google Cloud Platform, GCP, TCP/IP, OSI Model, Network Troubleshooting, Linux Administration, Python, PowerShell, Machine Learning, Customer Facing, Professional Services, Technical Consultant, Technical Advisor, Product SME, Product Adoption, Endpoint Deployment, Enterprise Security, Zero Trust, Next-Generation Firewall, NGFW, Palo Alto Networks, Cortex, Cybersecurity, Active TS/SCI, TS/SCI Clearance, Omaha, Nebraska