Security Engineer - SOAR and SIEM Automation - 172325

Piper Companies; United States; Hybrid; USD 135,000 - 145,000; Full time

Benefits offered by this job

Remote work environment

Medical insurance

Dental insurance

Vision insurance

401(k) with company match

Paid time off

Job summary

Piper Companies is seeking a Security Engineer to join our internal services consulting team. This role focuses on SIEM deployment, SOAR implementation, security automation, and Python development to help enterprise clients mature security monitoring and response capabilities.

The role is client-facing, requiring clear communication with security leaders and engineers. You will architect, deploy, migrate, integrate, and optimize security operations platforms across customer environments.

Qualifications

• 6+ years of experience deploying, integrating, and supporting enterprise SIEM platforms.
• 4+ years of hands-on experience implementing security automation and orchestration solutions.
• Extensive Python development experience, including API integrations, automation frameworks, and workflow development.
• Proven experience leading SIEM migration projects and platform transformations.

Responsibilities

• Design, develop, and implement security automation solutions using Python and SOAR platforms.
• Lead customer engagements involving SIEM deployment, migration, integration, and optimization.
• Create custom playbooks, workflows, integrations, and orchestration capabilities to reduce analyst workload.
• Integrate SIEM, SOAR, ticketing, endpoint, cloud, identity, and threat intelligence platforms.
• Identify opportunities to automate incident response, investigation, enrichment, and remediation processes.

Skills

SIEM deployment

SOAR implementation

security automation

Python development

Tools

Cortex XSOAR

Cortex XSIAM

Splunk

IBM QRadar

Microsoft Sentinel

Job description

Piper Companies is seeking a Security Engineer to join our internal services consulting team. This role is ideal for a security engineer or consultant with deep expertise in SIEM deployment, SOAR implementation, security automation, and Python development. The successful candidate will work directly with enterprise customers to architect, deploy, migrate, integrate, and optimize security operations platforms while helping clients mature their security monitoring and response capabilities.

This is a client-facing consulting role requiring both strong technical expertise and the ability to communicate effectively with security leaders, analysts, engineers, and executive stakeholders. The ideal candidate has hands‑on experience deploying and migrating SIEM and SOAR technologies, building custom automation solutions, and translating business requirements into scalable security operations capabilities. The role closely aligns with modern SIEM engineering, detection development, automation, orchestration, and customer enablement initiatives.

SOAR & Security Automation

• Design, develop, and implement security automation solutions using Python and SOAR platforms.
• Lead customer engagements involving SIEM deployment, migration, integration, and optimization.
• Create custom playbooks, workflows, integrations, and orchestration capabilities to reduce analyst workload.
• Integrate SIEM, SOAR, ticketing, endpoint, cloud, identity, and threat intelligence platforms.
• Identify opportunities to automate incident response, investigation, enrichment, and remediation processes.
• Develop reusable automation frameworks that improve SOC efficiency and scalability.
• Support security operations teams by reducing manual processes and accelerating response times.

Customer Consulting & Advisory

• Serve as a trusted advisor to customer security teams throughout implementation and migration projects.
• Lead technical workshops, requirements-gathering sessions, architecture reviews, and design discussions.
• Present technical recommendations to both technical and executive audiences.
• Collaborate with customer stakeholders to define detection, monitoring, and automation strategies.
• Train and enable customer teams on SIEM and SOAR administration, operations, and best practices.
• Produce high-quality technical documentation, implementation guides, and operational procedures

Required Qualifications

• 6+ years of experience deploying, integrating, and supporting enterprise SIEM platforms.
• 4+ years of hands‑on experience implementing security automation and orchestration solutions.
• Extensive Python development experience, including API integrations, automation frameworks, and workflow development.
• Proven experience leading SIEM migration projects and platform transformations.
• Hands‑on experience designing and deploying SOAR solutions in enterprise environments.
• Strong understanding of SOC operations, threat detection, incident response, and security monitoring.
• Experience creating and tuning detection rules, correlation logic, and alerting workflows.
• Strong working knowledge of log management, event collection, parsing, normalization, and enrichment.
• Experience leading customer‑facing consulting engagements and managing technical stakeholder relationships.
• Excellent written, verbal, and presentation skills.

Compensation & Benefits

• Base Salary: $135,000 - $145,000 ($165,000 - $185,000 OTE)
• Medical, Dental, and Vision Insurance
• 401(k) with Company Match
• Paid Time Off and Paid Holidays
• Sick Leave (as required by law)
• Professional Development and Certification Support
• Remote Work Environment

Keywords:

#LI-RL1

#LI-Onsite

SIEM Consultant, SOAR Consultant, Security Automation Engineer, Security Engineer, Python Developer, Python Automation, SIEM Migration, SIEM Deployment, SOAR Deployment, Security Consulting, Professional Services, Cortex XSOAR, Cortex XSIAM, Splunk, IBM QRadar, Microsoft Sentinel, Detection Engineering, Correlation Rules, Log Management, Log Ingestion, SOC Operations, Incident Response, Threat Detection, Security Orchestration, Security Automation, API Integration, Playbook Development, Security Monitoring, Cybersecurity Consulting, Enterprise Security, Security Engineering, Cloud Security, Threat Intelligence, Detection Content Development, Security Operations Center, Regex, Automation Frameworks, Client-Facing Consultant, Security Platform Integration, SOC Optimization.