Senior Security Automation Consultant - 177586

Piper Companies; United States; Remote; USD 130,000 - 145,000; Full time

Benefits offered by this job

Medical benefits

401(k)

PTO and paid holidays

Job summary

Zachary Piper Solutions seeks a Senior Security Services Consultant for a 100% remote role, supporting enterprise customers with SIEM engineering, threat detection, security telemetry, and automation across Cortex and other SIEM environments. You will onboard log sources, validate telemetry, develop and tune detections, and build dashboards and runbooks with clients and SOC teams.

Requirements: 5+ years in SIEM/detection engineering, hands-on experience with Splunk, Microsoft Sentinel, QRadar,

Qualifications

• 5+ years in SIEM engineering or related cybersecurity discipline.
• Hands-on experience with SIEM platforms listed in tools section.
• Strong ability to onboard, parse and normalize security telemetry.

Responsibilities

• Design, implement, and optimize SIEM and security analytics solutions across enterprise environments
• Onboard, integrate, and validate security log sources and telemetry
• Develop and tune detection content, correlation rules, and hunting queries
• Normalize, parse, map, and validate security data for reliable detections
• Analyze false positives and tune detections to improve alert fidelity
• Develop Python-based tooling to support SOC workflows
• Integrate SIEM, SOAR, EDR, and other security platforms
• Collaborate with customers and SOC teams to meet security requirements
• Support Cortex deployments and other enterprise security platforms
• Develop dashboards, runbooks, and engineering standards
• Present findings to technical and non-technical stakeholders

Skills

SIEM engineering

Detection engineering

Security analytics

Python scripting

Communication

Tools

Splunk

Microsoft Sentinel

QRadar

Elastic

Cortex XSIAM

Cortex XSOAR

Job description

Zachary Piper Solutions is seeking a Senior Security Services Consultant for a 100% remote opportunity supporting enterprise customers with SIEM engineering, threat detection, security telemetry, and security automation initiatives. The Senior Security Services Consultant will work directly with customers to onboard and integrate security data, develop and tune detections, improve alert quality, and implement security solutions across Cortex and other enterprise SIEM environments.

Responsibilities of the Senior Security Services Consultant:

• Design, implement, and optimize SIEM and security analytics solutions across enterprise customer environments
• Onboard, integrate, and validate security log sources and telemetry from cloud, endpoint, network, identity, and other security technologies
• Develop and tune detection content, correlation rules, hunting queries, and security analytics
• Normalize, parse, map, and validate security data to ensure accurate and reliable detection capabilities
• Analyze false positives and tune detections to improve alert fidelity and signal-to-noise ratio
• Identify detection gaps and develop threat-informed detection coverage
• Develop Python-based tooling and automation to support detection engineering, log validation, enrichment, and SOC workflows
• Integrate SIEM, SOAR, EDR, threat intelligence, identity, ITSM, and other cybersecurity platforms
• Partner directly with customers and SOC teams to understand security requirements and improve detection and investigation capabilities
• Support the deployment, configuration, integration, and optimization of Cortex and other enterprise security platforms
• Develop dashboards, reporting, technical documentation, runbooks, and engineering standards
• Present technical findings, recommendations, and solutions to technical and non-technical stakeholders

Qualifications for the Senior Security Services Consultant:

• 5+ years of experience in SIEM engineering, detection engineering, security engineering, security operations, or a related cybersecurity discipline
• Hands-on experience engineering SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, Elastic, Cortex XSIAM, or similar technologies
• Experience onboarding log sources, validating security telemetry, parsing data, and normalizing security events
• Experience developing and tuning correlation rules, detection content, hunting queries, and security analytics
• Experience analyzing false positives and improving detection quality and threat coverage
• Strong understanding of SOC operations, incident response, threat detection, and security analytics
• Python or scripting experience supporting security engineering, automation, data validation, enrichment, or analyst workflows
• Experience integrating enterprise security technologies using APIs and other platform interfaces
• Understanding of Linux/Unix systems, networking, authentication protocols, and enterprise security architectures
• Strong troubleshooting, analytical, and problem-solving skills
• Excellent communication skills with the ability to work directly with enterprise customers and technical stakeholders

Preferred Qualifications:

• Experience working in cybersecurity consulting, professional services, MSSP, or other customer-facing security engineering environments
• Experience implementing, deploying, or optimizing SIEM/security platforms across multiple customer environments
• Experience with Cortex XSIAM, Cortex XSOAR, or other Palo Alto security technologies
• Experience with Splunk Enterprise Security, Microsoft Sentinel, QRadar, or Elastic
• Experience with MITRE ATT&CK-based detection engineering and threat-informed defense
• Experience with detection-as-code methodologies, version-controlled detection content, or CI/CD
• Experience with threat hunting and threat intelligence integrationExperience integrating EDR, IAM, ITSM, cloud security, and other enterprise security platforms
• Experience with SOAR, security orchestration, playbooks, and security automation
• CISSP, GIAC/SANS, Security+, or related cybersecurity certifications

Compensation for the Senior Security Services Consultant includes:

• Salary: $130,000 - $145,000 + Utilization-based bonus with approximately $25,000 in additional compensation at target utilization (77-83%)
• Comprehensive Benefits Package including Medical, Dental, Vision, 401(k), PTO, and Paid Holidays

Keywords:

• SIEM, Detection Engineering, Security Analytics, Threat Detection, Security Telemetry, Log Onboarding, Log Management, Log Normalization, Correlation Rules, Detection Rules, Alert Tuning, Splunk, Splunk Enterprise Security, Microsoft Sentinel, QRadar, Elastic, Cortex XSIAM, Cortex XSOAR, Python, Security Automation, SOAR, MITRE ATT&CK, Detection-as-Code, Threat Hunting, Threat Intelligence, SOC, Incident Response, Professional Services, Cybersecurity Consulting, Security Engineering