Extended Expertise Engineer - 174091

Zachary Piper Solutions; Northern (KY); Hybrid; USD 150,000 - 170,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401k Plan

Paid time off

Job summary

Zachary Piper Solutions seeks an experienced Extended Expertise Engineer to support a leading enterprise cybersecurity platform. This onsite role at Scott AFB, IL requires an active Top Secret/TS/SCI clearance and hands-on deployment, tuning, and training of endpoint protection within customer environments.

The role emphasizes threat hunting, SOC-style operations, and close collaboration with product and engineering teams to maximize platform adoption and security outcomes.

Qualifications

• Experience deploying endpoint protection solutions in customer-facing environments.

Responsibilities

• Serve as the primary technical advisor for customers, understanding security objectives and threat landscape to deliver outcomes.

Skills

Endpoint protection

XDR

Threat hunting

Detection engineering

BIOCs

SIEM (Splunk)

XDR APIs

Python

PowerShell

Palo Alto Networks

Zero Trust

Cloud security

Top Secret clearance

Tools

Splunk

XQL

SQL

Python

PowerShell

Job description

Zachary Piper Solutions is seeking an experienced an Extended Expertise Engineer to support a leading enterprise cybersecurity platform known for next-generation firewalls, cloud security, zero trust, and AI-driven threat detection. This is an onsite position located at Scott Air Force Base in Illinois & requires an active Top Secret security clearance.

The Extended Expertise Engineer is an integral part of our client's mission within their Professional Services team. As an Extended Expertise Engineer, you will work on-site/remote with the client's customer(s) supporting their mission to help them quickly and completely adopt their End Pointy Platform, leaving them more secure. This is a highly technical, hands‑on role and you will develop and maintain expert‑level skill sets on the products and solutions deployed within the customer's environment.

Responsibilities of the Extended Expertise Engineer

• Serve as the primary technical advisor for customers, understanding their business requirements, security objectives, and industry‑specific threat landscape to deliver effective security outcomes.
• Lead endpoint protection deployments, operationalization, troubleshooting, optimization, and end‑user training to ensure successful adoption and long‑term value.
• Drive customer success by providing deployment guidance, accelerating time‑to‑value, expanding product adoption through new features and innovative use cases, and serving as the product subject matter expert throughout the customer lifecycle.
• Partner with product and engineering teams to resolve technical issues, provide customer feedback, and maximize platform capabilities for customers and partners.
• Perform security operations activities including incident response, threat hunting, detection engineering, alert tuning, custom BIOC development, correlation rule creation, and onboarding new log sources into XDR platforms.
• Support log ingestion, parsing, and integration efforts while leveraging SIEM and XDR technologies to improve detection and response capabilities.
• Troubleshoot networking, endpoint, cloud, and operating system issues across enterprise environments, utilizing scripting and automation where appropriate.

Qualifications for the Extended Expertise Engineer

• Experience deploying, operationalizing, troubleshooting, and training customers on endpoint protection solutions, with a background as a Security Incident Responder, SOC Analyst, or SOC Manager in customer‑facing environments.
• Strong understanding of cloud technologies and security use cases across AWS, Azure, and Google Cloud Platform (GCP), as well as enterprise security products, IT infrastructure, networking fundamentals (TCP/IP, OSI Model), and basic Linux administration and troubleshooting.
• Hands‑on experience with threat hunting, detection engineering, alert tuning, custom BIOC development, correlation rule creation, XDR log ingestion and parsing, SIEM platforms (e.g., Splunk), XDR APIs, and query languages such as XQL, SQL, or similar.
• Experience analyzing customer requirements, guiding technical deployments, accelerating product adoption, and serving as a trusted technical advisor throughout the customer lifecycle.
• Familiarity with machine learning applications in cybersecurity and experience developing or maintaining automation scripts in Python or PowerShell.
• Active Top Secret security clearance.
• Ability and willingness to work onsite at Scott AFB, IL.

Compensation for the Extended Expertise Engineer

• Salary Range: $150,000 - $170,000 *depending on experience*
• Comprehensive Benefits: Medical, Dental, Vision, 401k Plan, PTO, Holidays, Sick Leave if required by law

#LI-MS1

#LI-ONSITE

Keywords: Endpoint Protection, Endpoint Security, EDR, XDR, Cortex XDR, Security Incident Response, Incident Responder, SOC Analyst, SOC Manager, Threat Hunting, Detection Engineering, BIOCs, Behavioral Indicators of Compromise, Alert Tuning, Correlation Rules, Log Ingestion, Log Parsing, SIEM, Splunk, XQL, SQL, XDR APIs, Cloud Security, AWS, Azure, Google Cloud Platform, GCP, TCP/IP, OSI Model, Network Troubleshooting, Linux Administration, Python, PowerShell, Machine Learning, Customer Facing, Professional Services, Technical Consultant, Technical Advisor, Product SME, Product Adoption, Endpoint Deployment, Enterprise Security, Zero Trust, Next-Generation Firewall, NGFW, Palo Alto Networks, Cortex, Cybersecurity, Active TS/SCI, TS/SCI Clearance, Omaha, Nebraska