On-Site SOC Automation & Integration Engineer (Splunk/Python)

ZP Group; Raleigh (NC); On-site; USD 110,000 - 135,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401K

Job summary

Piper Companies seeks a SOC / Security Automation & Integration Engineer to join a mission-driven cybersecurity environment supporting advanced security operations and threat detection initiatives. This on-site, long-term consulting role acts as the technical bridge between security platforms, threat intelligence, monitoring tools, and operational workflows to create a more automated and resilient SOC.

The engineer will design, implement, and maintain integrations, develop automation tooling in

Qualifications

• Active Secret Clearance required.
• Experience progressing from SOC Analyst, Incident Response, Detection Engineering, or similar security operations roles into security engineering or platform integration responsibilities.
• Hands-on expertise with Splunk Enterprise, including SPL development, alerting, dashboard creation, data onboarding, and security analytics.
• Proven experience integrating security technologies, threat intelligence feeds, APIs, case management solutions, and monitoring platforms into Splunk environments.
• Strong scripting and automation experience using Python for workflow orchestration, data enrichment, tool integration, and operational efficiency improvements.

Responsibilities

• Design, implement, and maintain integrations between security platforms, threat intelligence systems, case management solutions, and Splunk to improve SOC efficiency and visibility.
• Develop automation workflows and Python-based tooling that streamline investigation, escalation, enrichment, and incident response processes.
• Build and optimize Splunk dashboards, alerts, correlation searches, reports, and custom applications to strengthen security monitoring capabilities.
• Establish and manage data quality and telemetry validation processes to ensure security data is accurate, complete, and actionable for analysts and detection teams.
• Partner with SOC analysts, threat intelligence personnel, and security engineering teams to translate operational requirements into scalable technical solutions.

Skills

Python scripting

Automation workflows

SOC operations

Security engineering

Tools

Splunk Enterprise

SPL

Job description

Piper Companies seeks a SOC / Security Automation & Integration Engineer to join a mission-driven cybersecurity environment supporting advanced security operations and threat detection initiatives. This on-site, long-term consulting role acts as the technical bridge between security platforms, threat intelligence, monitoring tools, and operational workflows to create a more automated and resilient SOC.

The engineer will design, implement, and maintain integrations, develop automation tooling in