SIEM/SOAR Automation Lead

Zachary Piper, LLC; United States; Hybrid; USD 135,000 - 155,000; Full time

Benefits offered by this job

Full comprehensive benefits package

Job summary

Zachary Piper Solutions is seeking a Cybersecurity Consultant to design, implement, and optimize SIAM/SOAR automation playbooks and workflows, improving incident response and security operations efficiency.

You will lead integrations with SIEM, EDR, and other platforms using Python, REST APIs, and JSON; translate customer requirements into scalable automation, provide workshops, and advise on deployment and operational improvements.

Qualifications

• 3+ years of experience in cybersecurity consulting.
• Hands-on experience building automation playbooks and integrations within SOAR and/or SIAM.
• Strong Python development skills with REST APIs and JSON for security automation and integrations.
• Experience in Security Operations (SOC) environments with incident response knowledge.
• Knowledge of enterprise security technologies including SIEM, EDR, IDS/IPS, and endpoint security.
• Ability to communicate with technical teams and executives while managing multiple customer engagements.
• Experience with Linux/Unix environments and large-scale enterprise security deployments preferred.

Responsibilities

• Design, develop, and optimize SIAM/SOAR automation playbooks and workflows to improve incident response and security operations efficiency.
• Lead the implementation of security automation solutions, including integrations with SIEM, EDR, and third-party security platforms using Python, REST APIs, and JSON.
• Analyze customer security operations processes and translate business requirements into scalable automation and orchestration solutions.
• Serve as a trusted advisor for customers, guiding automation best practices, deployment strategies, and operational improvements.
• Conduct troubleshooting, health checks, and ongoing optimization of integrations, automation content, and security workflows.
• Deliver technical workshops, training, and knowledge transfer sessions to enable customer teams to manage and expand security automation capabilities.

Skills

Cybersecurity consulting

SOAR automation

Python development

SOC experience

Security tech knowledge

Communication

Linux/Unix

Tools

REST APIs

JSON

SIEM

EDR

Job description

Piper Companies is seeking a SIEM Automation Consultant to support enterprise customers in designing, implementing, and optimizing security orchestration, automation, and response (SOAR) solutions within the Cortex XSIAM ecosystem. This role is ideal for a security professional with deep expertise in Cortex XSOAR/XSIAM, security operations, and automation development who excels at translating complex business requirements into scalable security workflows and serving as a trusted advisor to customers throughout their security transformation journey. This is a remote position.

Responsibilities:

• Design, develop, and optimize SIAM/SOAR automation playbooks and workflows to improve incident response and security operations efficiency.
• Lead the implementation of security automation solutions, including integrations with SIEM, EDR, and third-party security platforms using Python, REST APIs, and JSON.
• Analyze customer security operations processes and translate business requirements into scalable automation and orchestration solutions.
• Serve as a trusted advisor and subject matter expert for customers, providing guidance on automation best practices, deployment strategies, and operational improvements.
• Conduct troubleshooting, health checks, and ongoing optimization of integrations, automation content, and security workflows.
• Deliver technical workshops, training, and knowledge transfer sessions to enable customer teams to successfully manage and expand their security automation capabilities.

Qualifications:

• 3+ years of experience in cybersecurity consulting
• Hands-on experience building automation playbooks and integrations within SOAR and/or SIAM.
• Strong Python development skills with experience utilizing RESTful APIs and JSON for security automation and integrations.
• Experience working in Security Operations (SOC) environments with a solid understanding of incident response processes and security workflows.
• Knowledge of enterprise security technologies, including SIEM, EDR, IDS/IPS, and endpoint security solutions.
• Ability to communicate effectively with both technical teams and executive stakeholders while managing multiple customer engagements.
• Experience with Linux/Unix environments, cybersecurity incident response, or large-scale enterprise security deployments is preferred.

Compensation:

Salary Range: $135,000 - $155,000 based on experience

Benefits: Full comprehensive benefits package

This job opens for applications on 8/31/2026. Applications for this job will be accepted for at least 30 days from the posting date.

#LI-AD2 #LI-ONSITE

Keywords:

#ProfessionalServices #SecurityAutomation #Remote #XSIAM, XSOAR, Cortex XSIAM, Cortex XSOAR, SOAR, Security Orchestration, Security Automation, Incident Response, SOC Operations, SIEM Integration, EDR Integration, Cybersecurity Consulting, Security Engineering, Python Development, REST API, JSON, Playbook Development, Security Operations Center, Threat Response, Palo Alto Networks, Security Integrations, Technical Consulting, Cybersecurity Services, Enterprise Security