On-site Security Engineer: Splunk & Automation

Piper Companies; Durham (NC); On-site; USD 83,000 - 91,000; Full time

Job summary

Piper Companies is seeking a Security Engineer (Splunk & Automation) to join a leading cybersecurity team supporting enterprise security operations in Durham, NC. The role focuses on Splunk development, tool integrations, automation, and threat intelligence workflows in a long-term on-site contract.

Ideal candidates have progressed from a SOC Analyst background, with 3+ years in security engineering, hands-on Splunk Enterprise experience, and strong Python scripting.

Qualifications

• Active Secret Clearance required.
• 3+ years of experience in Security Engineering or related cybersecurity role.
• Strong hands-on experience with Splunk Enterprise, SPL, dashboards, alerts, reporting.
• Experience integrating security tools and platforms into Splunk environments.
• Strong Python scripting and automation experience.
• Understanding of SOC operations, incident response, threat detection, and security monitoring workflows.
• Experience leveraging APIs to integrate security technologies and workflows.

Responsibilities

• Design, develop, and maintain integrations between Splunk, threat intelligence platforms, case management tools, and other security technologies.
• Build and support security automation solutions that improve SOC efficiency and accelerate incident response activities.
• Develop and maintain Splunk searches, alerts, dashboards, reports, data models, and custom applications.
• Integrate and operationalize threat intelligence feeds, enrichment workflows, and intelligence-sharing processes.
• Create Python-based automation to streamline security monitoring, investigations, and remediation efforts.
• Design and implement data quality and telemetry validation processes to ensure accurate security visibility.
• Collaborate with SOC analysts, threat intelligence teams, detection engineers, and platform owners to improve workflows and reduce manual effort.
• Perform data integrity monitoring and create alerts to identify gaps affecting threat detection, compliance reporting, or incident response.
• Support security platform interoperability through API integrations and custom engineering solutions.

Skills

Active Secret Clearance

Splunk Engineering

Security Automation

Python scripting

SOC Operations understanding

APIs integration

Tools

Splunk Enterprise

OpenCTI

TheHive

SOAR

REST APIs

Job description

Piper Companies is seeking a Security Engineer (Splunk & Automation) to join a leading cybersecurity team supporting enterprise security operations in Durham, NC. The role focuses on Splunk development, tool integrations, automation, and threat intelligence workflows in a long-term on-site contract.

Ideal candidates have progressed from a SOC Analyst background, with 3+ years in security engineering, hands-on Splunk Enterprise experience, and strong Python scripting.