SOC / Security Automation & Integration Engineer

Piper Companies; Raleigh (NC); On-site; USD 110,000 - 135,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Sick leave

401K

20 days PTO + 11 holidays

Job summary

Piper Companies is seeking a SOC / Security Automation & Integration Engineer to join a mission-driven cybersecurity environment in Raleigh, NC. This is a full-time, on-site consulting role supporting advanced security operations and threat detection initiatives.

You will design and maintain integrations between security platforms and Splunk, build Python automation workflows, and develop dashboards and alerts to strengthen SOC monitoring. A Secret clearance and Splunk expertise are required.

Qualifications

• Active Secret Security Clearance required.
• Experience progressing from SOC Analyst, Incident Response, or Detection Engineering into security engineering or platform integration responsibilities.
• Hands-on Splunk Enterprise with SPL development, alerting, dashboards, data onboarding, and security analytics.
• Proven experience integrating security technologies, threat intel feeds, APIs, case management solutions, and monitoring platforms into Splunk environments.
• Strong Python scripting for automation and workflow orchestration.

Responsibilities

• Design, implement, and maintain integrations between security platforms, threat intelligence systems, case management solutions, and Splunk to improve SOC efficiency and visibility.
• Develop automation workflows and Python-based tooling that streamline investigation, escalation, enrichment, and incident response processes.
• Build and optimize Splunk dashboards, alerts, correlation searches, reports, and custom applications to strengthen security monitoring capabilities.
• Establish and manage data quality and telemetry validation processes to ensure security data is accurate, complete, and actionable for analysts and detection teams.
• Partner with SOC analysts, threat intelligence personnel, and security engineering teams to translate operational requirements into scalable technical solutions.

Skills

Splunk SPL development

Python scripting

Security integration

SOC to engineering transition

Tools

Splunk Enterprise

Job description

Piper Companies is seeking a SOC / Security Automation & Integration Engineer to join a mission-driven cybersecurity environment supporting advanced security operations and threat detection initiatives. This SOC / Security Automation & Integration Engineer will serve as the technical bridge between security platforms, threat intelligence sources, monitoring tools, and operational workflows, helping create a more automated, scalable, and resilient SOC. This is a full-time, fully on-site, long-term consulting opportunity.

Responsibilities

• Design, implement, and maintain integrations between security platforms, threat intelligence systems, case management solutions, and Splunk to improve SOC efficiency and visibility.
• Develop automation workflows and Python-based tooling that streamline investigation, escalation, enrichment, and incident response processes.
• Build and optimize Splunk dashboards, alerts, correlation searches, reports, and custom applications to strengthen security monitoring capabilities.
• Establish and manage data quality and telemetry validation processes to ensure security data is accurate, complete, and actionable for analysts and detection teams.
• Partner with SOC analysts, threat intelligence personnel, and security engineering teams to translate operational requirements into scalable technical solutions.

Qualifications

• Active Secret Security Clearance required.
• Experience progressing from SOC Analyst, Incident Response, Detection Engineering, or similar security operations roles into security engineering or platform integration responsibilities.
• Hands-on expertise with Splunk Enterprise, including SPL development, alerting, dashboard creation, data onboarding, and security analytics.
• Proven experience integrating security technologies, threat intelligence feeds, APIs, case management solutions, and monitoring platforms into Splunk environments.
• Strong scripting and automation experience using Python for workflow orchestration, data enrichment, tool integration, and operational efficiency improvements.

Compensation

Salary Range: $110,000 - $135,000 annually

Comprehensive Benefits: Medical, Dental, Vision, sick leave if required by law, and 401K

Additional Benefits: 20 Days PTO + 11 Paid Holidays

Application Details

• Employment Type: Full-Time (40 Hours Per Week)
• Work Arrangement: Fully On-Site
• Engagement Type: Long-Term Consulting Opportunity
• Security Requirement: Active Secret Clearance Required
• Posted Date: 08/07/2026
• Apply By: 09/07/2026

Keywords

SOC Engineer, Security Engineer, Splunk Enterprise, SPL, Security Automation, Security Integration, SOC Operations, Threat Intelligence, OpenCTI, TheHive, Incident Response, Detection Engineering, Security Monitoring, SOAR, Cybersecurity, Python Automation, API Integration, Threat Hunting, Log Analysis, Security Analytics, SIEM, Data Integrity, Telemetry Validation, Security Alerting, Dashboard Development, Case Management, Security Platforms, Workflow Automation, Security Tool Integration, Threat Feed Management, Data Quality Assurance, Security Operations Center, Investigations, Security Orchestration, Custom Splunk Apps, Enterprise Security, Blue Team, Cyber Defense, Intelligence Enrichment, Detection Content Development