Secret-Cleared Cybersecurity Integrations Engineer (Hybrid)

ZP Group; United States; Hybrid; USD 120,000 - 140,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k)

Sick leave

Job summary

Piper Companies seeks a Cybersecurity Integration Engineer to join a security operations team in a hybrid RTP, NC setting. You will connect security tools, data sources, threat intel, and workflows to automate and improve SOC operations.

The role requires 5+ years in related fields, hands-on Splunk expertise, and experience building automation using Python and APIs, with an active Secret Clearance.

Qualifications

• Active Secret Clearance required for the role.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related discipline preferred.
• 5+ years of experience in Security Operations, Security Engineering, Splunk Engineering, or Cybersecurity Platform Integration roles.
• Experience as a SOC Analyst who transitioned into a Security Engineering or Splunk Engineering role strongly preferred.
• Strong hands-on experience with Splunk Enterprise, including SPL development, dashboards, alerts, saved searches, indexes, KVStores, and custom application development.
• Experience developing automation and orchestration solutions using Python, APIs, and scripting to reduce manual effort and improve efficiency.

Responsibilities

• Engineer and maintain integrations between OpenCTI, Splunk, TheHive, and other security operations platforms.
• Develop and support security automation and SOAR-style workflows to improve SOC investigations, triage, escalation, and incident response.
• Build and enhance Splunk dashboards, saved searches, alerts, reports, and data models.
• Lead SOC data integrity initiatives ensuring telemetry accuracy, completeness and reliability.
• Develop alerting and reporting to identify data gaps, mis-matches, and quality issues affecting detection or compliance.
• Integrate security tools and data sources into Splunk to improve visibility and operations.

Skills

Splunk Enterprise

Python

APIs

SOAR workflows

Threat intelligence

OpenCTI

TheHive

Education

Bachelor's degree in Cybersecurity

Tools

OpenCTI

TheHive

Splunk

Job description

Piper Companies seeks a Cybersecurity Integration Engineer to join a security operations team in a hybrid RTP, NC setting. You will connect security tools, data sources, threat intel, and workflows to automate and improve SOC operations.

The role requires 5+ years in related fields, hands-on Splunk expertise, and experience building automation using Python and APIs, with an active Secret Clearance.