Hybrid RTP Cybersecurity Data Integration Engineer

Zachary Piper Solutions; United States; Hybrid; USD 120,000 - 140,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k)

Sick leave

Job summary

Piper Companies is seeking a Cybersecurity Integration Engineer to join a leading cybersecurity operations team. This role focuses on connecting security tools, data sources, threat intelligence, and workflows to automate and improve SOC operations.

Hybrid environment in RTP, NC, requiring an active Secret Clearance. 5+ years in security engineering or Splunk roles, with strong SPL, dashboards, and automation experience, are preferred for this long-term contract position.

Qualifications

• Active Secret Clearance required.
• 5+ years of experience in Security Operations, Security Engineering, Splunk Engineering, or Cybersecurity Platform Integration.
• Experience as a SOC Analyst who transitioned into a Security Engineering or Splunk Engineering role strongly preferred.
• Strong hands-on experience with Splunk Enterprise, including SPL development, dashboards, alerts, saved searches, indexes, KVStores, and custom application development.
• Experience developing automation and orchestration solutions using Python, APIs, and scripting to reduce manual effort and improve operational efficiency.
• Knowledge of threat intelligence lifecycle management, enrichment processes, and intelligence-sharing methodologies.

Responsibilities

• Engineer and maintain integrations between OpenCTI, Splunk, TheHive, and other security operations platforms.
• Develop and support security automation and SOAR-style workflows that improve SOC investigation, triage, escalation, and incident response processes.
• Build, maintain, and enhance Splunk security applications, dashboards, saved searches, alerts, reports, and supporting data models.
• Design and lead SOC data integrity initiatives to ensure the accuracy, completeness, and reliability of security telemetry.
• Develop alerting and reporting mechanisms to identify missing data, field mismatches, telemetry gaps, and data quality issues that may impact detection logic, threat hunting, incident response, or compliance requirements.
• Integrate security tools and data sources into Splunk to improve visibility, correlation, and operational effectiveness.

Skills

Splunk Engineering

Python scripting

Automation & Orchestration

SPL development

Threat intelligence

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering

Tools

OpenCTI

TheHive

Splunk Enterprise

Job description

Piper Companies is seeking a Cybersecurity Integration Engineer to join a leading cybersecurity operations team. This role focuses on connecting security tools, data sources, threat intelligence, and workflows to automate and improve SOC operations.

Hybrid environment in RTP, NC, requiring an active Secret Clearance. 5+ years in security engineering or Splunk roles, with strong SPL, dashboards, and automation experience, are preferred for this long-term contract position.