Hybrid RTP Cybersecurity Automation & Integration Engineer

Piper Companies; North Carolina; Hybrid; USD 120,000 - 140,000; Full time

Job summary

Piper Companies in RTP, NC seeks a Cybersecurity Integration Engineer to join a leading security operations team in a hybrid environment. This role connects security tools, data sources, threat intelligence, and workflows to create a more automated, reliable SOC.

You will engineer integrations (OpenCTI, Splunk, TheHive), develop automation and SOAR-style workflows, build Splunk dashboards and data models, and advance data integrity for detection, threat hunting, and incident response using

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline preferred.
• 5+ years of experience in Security Operations, Security Engineering, Splunk Engineering, or Cybersecurity Platform Integration.
• Strong hands-on experience with Splunk Enterprise, including SPL development, dashboards, alerts, saved searches, indexes, KVStores, and custom application development.
• Experience developing automation and orchestration solutions using Python, APIs, and scripting to reduce manual effort and improve operational efficiency.
• Knowledge of threat intelligence lifecycle management, enrichment processes, and intelligence-sharing methodologies.

Responsibilities

• Engineer and maintain integrations between OpenCTI, Splunk, TheHive, and other security operations platforms.
• Develop and support security automation and SOAR-style workflows that improve SOC investigation, triage, escalation, and incident response processes.
• Build, maintain, and enhance Splunk security applications, dashboards, saved searches, alerts, reports, and supporting data models.
• Design and lead SOC data integrity initiatives to ensure the accuracy, completeness, and reliability of security telemetry.
• Develop alerting and reporting mechanisms to identify missing data, field mismatches, telemetry gaps, and data quality issues that may impact detection logic, threat hunting, incident response, or compliance requirements.
• Integrate security tools and data sources into Splunk to improve visibility, correlation, and operational effectiveness.

Skills

SOC Operations

Security Engineering

Splunk SPL

Python Scripting

REST APIs

Threat Intelligence

Data Integrity

SOAR workflows

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Tools

Splunk Enterprise

OpenCTI

TheHive

Job description

Piper Companies in RTP, NC seeks a Cybersecurity Integration Engineer to join a leading security operations team in a hybrid environment. This role connects security tools, data sources, threat intelligence, and workflows to create a more automated, reliable SOC.

You will engineer integrations (OpenCTI, Splunk, TheHive), develop automation and SOAR-style workflows, build Splunk dashboards and data models, and advance data integrity for detection, threat hunting, and incident response using