SOC Automation & Splunk Engineer — SIEM Integrations

Zachary Piper Solutions; Raleigh (NC); On-site; USD 115,000 - 145,000; Full time

Benefits offered by this job

Comprehensive benefits

Paid time off

Job summary

Piper Companies seeks a SOC / Security Automation & Integration Engineer to join a premier cybersecurity and defense-focused organization in Raleigh, NC. The role centers on connecting security platforms, optimizing workflows, and enhancing visibility through automation and data integration.

You will design integrations between security platforms, develop Python-based automation, and build Splunk dashboards and data models to strengthen monitoring.

Qualifications

• Active Secret Clearance required.
• Experience progressing from SOC Analyst to Security Engineer or Splunk Engineer.
• Strong hands-on experience with Splunk Enterprise, SPL development, alerting, dashboards, and security tool integrations.
• Proven experience integrating security platforms and threat intelligence into Splunk environments.
• Proficiency in Python scripting, API development, and automation for security operations.

Responsibilities

• Design, implement, and support integrations between security platforms, threat intel systems, case management solutions, and SIEM technologies.
• Develop automation workflows and Python-based solutions to improve alert triage, investigation, escalation, and response processes.
• Build and maintain Splunk dashboards, alerts, correlation searches, custom applications, and data models.
• Establish and manage security telemetry validation processes to ensure data accuracy and reliability.
• Partner with SOC analysts, threat intel teams, and security engineers to streamline workflows and reduce manual tasks.

Skills

Splunk Enterprise

SPL development

Dashboards & alerts

Automation & scripting

Python scripting

Security integrations

API development

Threat intelligence

Security operations

SOAR

Tools

Splunk Enterprise

Job description

Piper Companies seeks a SOC / Security Automation & Integration Engineer to join a premier cybersecurity and defense-focused organization in Raleigh, NC. The role centers on connecting security platforms, optimizing workflows, and enhancing visibility through automation and data integration.

You will design integrations between security platforms, develop Python-based automation, and build Splunk dashboards and data models to strengthen monitoring.