Security Engineer - SOAR and SIEM Automation - 172325

ZP Group; United States; Remote; USD 135,000 - 145,000; Full time

Benefits offered by this job

Remote work environment

Job summary

Piper Companies is seeking a Security Engineer to join our internal services consulting team, focusing on SIEM deployment, SOAR, security automation, and Python development.

You will work directly with enterprise customers to architect, deploy, migrate, integrate, and optimize security operations platforms while helping clients mature their monitoring and response capabilities and communicating with security leaders and engineers.

Qualifications

• 6+ years deploying, integrating, and supporting enterprise SIEMs.
• 4+ years hands-on security automation and orchestration experience.
• Extensive Python development incl. APIs and automation frameworks.
• Led SIEM migration projects and platform transformations.
• Designing and deploying SOAR solutions in enterprises.
• Strong SOC ops, threat detection, and monitoring knowledge.
• Creation and tuning of detection rules and alerting workflows.
• Log management, event collection, parsing, normalization, enrichment.
• Experience leading client-facing consulting engagements.

Responsibilities

• Design, develop, and implement security automation solutions using Python and SOAR platforms.
• Lead customer engagements involving SIEM deployment, migration, integration, and optimization.
• Create custom playbooks, workflows, integrations, and orchestration capabilities.
• Integrate SIEM, SOAR, ticketing, endpoint, cloud, identity, and threat intel platforms.
• Identify opportunities to automate incident response, investigation, enrichment, and remediation.
• Develop reusable automation frameworks to improve SOC efficiency and scalability.
• Support security operations teams by reducing manual processes and accelerating response times.
• Provide guidance during implementation and migration projects for customers.

Skills

SIEM deployment

SOAR implementation

Python development

Automation & orchestration

SOC operations

Threat detection

Incident response

Customer-facing consulting

Tools

Cortex XSOAR

Cortex XSIAM

Splunk

IBM QRadar

Microsoft Sentinel

Job description

Piper Companies is seeking a Security Engineer to join our internal services consulting team. This role is ideal for a security engineer or consultant with deep expertise in SIEM deployment, SOAR implementation, security automation, and Python development. The successful candidate will work directly with enterprise customers to architect, deploy, migrate, integrate, and optimize security operations platforms while helping clients mature their security monitoring and response capabilities.

This is a client-facing consulting role requiring both strong technical expertise and the ability to communicate effectively with security leaders, analysts, engineers, and executive stakeholders. The ideal candidate has hands‑on experience deploying and migrating SIEM and SOAR technologies, building custom automation solutions, and translating business requirements into scalable security operations capabilities. The role closely aligns with modern SIEM engineering, detection development, automation, orchestration, and customer enablement initiatives.

SOAR & Security Automation

• Design, develop, and implement security automation solutions using Python and SOAR platforms.
• Lead customer engagements involving SIEM deployment, migration, integration, and optimization.
• Create custom playbooks, workflows, integrations, and orchestration capabilities to reduce analyst workload.
• Integrate SIEM, SOAR, ticketing, endpoint, cloud, identity, and threat intelligence platforms.
• Identify opportunities to automate incident response, investigation, enrichment, and remediation processes.
• Develop reusable automation frameworks that improve SOC efficiency and scalability.
• Support security operations teams by reducing manual processes and accelerating response times.

Customer Consulting & Advisory

• Serve as a trusted advisor to customer security teams throughout implementation and migration projects.
• Lead technical workshops, requirements‑gathering sessions, architecture reviews, and design discussions.
• Present technical recommendations to both technical and executive audiences.
• Collaborate with customer stakeholders to define detection, monitoring, and automation strategies.
• Train and enable customer teams on SIEM and SOAR administration, operations, and best practices.
• Produce high-quality technical documentation, implementation guides, and operational procedures

Required Qualifications

• 6+ years of experience deploying, integrating, and supporting enterprise SIEM platforms.
• 4+ years of hands‑on experience implementing security automation and orchestration solutions.
• Extensive Python development experience, including API integrations, automation frameworks, and workflow development.
• Proven experience leading SIEM migration projects and platform transformations.
• Hands‑on experience designing and deploying SOAR solutions in enterprise environments.
• Strong understanding of SOC operations, threat detection, incident response, and security monitoring.
• Experience creating and tuning detection rules, correlation logic, and alerting workflows.
• Strong working knowledge of log management, event collection, parsing, normalization, and enrichment.
• Experience leading customer‑facing consulting engagements and managing technical stakeholder relationships.
• Excellent written, verbal, and presentation skills.

Compensation & Benefits

• Base Salary: $135,000 - $145,000 ($165,000 - $185,000 OTE)
• Medical, Dental, and Vision Insurance
• 401(k) with Company Match
• Paid Time Off and Paid Holidays
• Sick Leave (as required by law)
• Professional Development and Certification Support
• Remote Work Environment

Keywords:

#LI-RL1

#LI-Onsite

SIEM Consultant, SOAR Consultant, Security Automation Engineer, Security Engineer, Python Developer, Python Automation, SIEM Migration, SIEM Deployment, SOAR Deployment, Security Consulting, Professional Services, Cortex XSOAR, Cortex XSIAM, Splunk, IBM QRadar, Microsoft Sentinel, Detection Engineering, Correlation Rules, Log Management, Log Ingestion, SOC Operations, Incident Response, Threat Detection, Security Orchestration, Security Automation, API Integration, Playbook Development, Security Monitoring, Cybersecurity Consulting, Enterprise Security, Security Engineering, Cloud Security, Threat Intelligence, Detection Content Development, Security Operations Center, Regex, Automation Frameworks, Client-Facing Consultant, Security Platform Integration, SOC Optimization.