SIEM & SOAR Automation Engineer (Python)

ZP Group; United States; Remote; USD 135,000 - 145,000; Full time

Benefits offered by this job

Remote work environment

Medical, Dental, and Vision Insurance

401(k) with Company Match

Paid Time Off and Holidays

Job summary

Piper Companies seeks a Security Engineer to join our internal services consulting team. You will architect, deploy, migrate, integrate, and optimize security operations platforms for enterprise clients, maturing monitoring and response capabilities.

Ideal candidates have deep expertise in SIEM deployment, SOAR, security automation, and Python development, with hands-on experience in architecting security operations at scale and communicating effectively with security leaders and engineers.

Qualifications

• 6+ years of experience deploying, integrating, and supporting enterprise SIEM platforms.
• 4+ years of hands-on experience implementing security automation and orchestration solutions.
• Extensive Python development experience, including API integrations, automation frameworks, and workflow development.
• Proven experience leading SIEM migration projects and platform transformations.
• Hands-on experience designing and deploying SOAR solutions in enterprise environments.
• Strong understanding of SOC operations, threat detection, incident response, and security monitoring.
• Experience creating and tuning detection rules, correlation logic, and alerting workflows.
• Strong working knowledge of log management, event collection, parsing, normalization, and enrichment.
• Experience leading customer-facing consulting engagements and managing technical stakeholder relationships.
• Excellent written, verbal, and presentation skills.

Responsibilities

• Design, develop, and implement security automation solutions using Python and SOAR platforms.
• Lead customer engagements involving SIEM deployment, migration, integration, and optimization.
• Create custom playbooks, workflows, integrations, and orchestration capabilities to reduce analyst workload.
• Integrate SIEM, SOAR, ticketing, endpoint, cloud, identity, and threat intelligence platforms.
• Identify opportunities to automate incident response, investigation, enrichment, and remediation processes.
• Develop reusable automation frameworks that improve SOC efficiency and scalability.
• Support security operations teams by reducing manual processes and accelerating response times.
• Serve as a trusted advisor to customer security teams throughout implementation and migration projects.
• Lead technical workshops, requirements-gathering sessions, architecture reviews, and design discussions.
• Present technical recommendations to both technical and executive audiences.
• Collaborate with customer stakeholders to define detection, monitoring, and automation strategies.
• Train and enable customer teams on SIEM and SOAR administration, operations, and best practices.
• Produce high-quality technical documentation, implementation guides, and operational procedures

Skills

SIEM deployment

SOAR implementation

Security automation

Python development

Incident response

Threat detection

SOC operations

Log management

API integration

Customer-facing consulting

Tools

Cortex XSOAR

Cortex XSIAM

Splunk

IBM QRadar

Microsoft Sentinel

Job description

Piper Companies seeks a Security Engineer to join our internal services consulting team. You will architect, deploy, migrate, integrate, and optimize security operations platforms for enterprise clients, maturing monitoring and response capabilities.

Ideal candidates have deep expertise in SIEM deployment, SOAR, security automation, and Python development, with hands-on experience in architecting security operations at scale and communicating effectively with security leaders and engineers.