SOC / Security Automation & Integration Engineer

Zachary Piper Solutions; Raleigh (NC); On-site; USD 115,000 - 145,000; Full time

Benefits offered by this job

Comprehensive benefits

Paid time off

Job summary

Piper Companies seeks a SOC / Security Automation & Integration Engineer to join a premier cybersecurity and defense-focused organization in Raleigh, NC. The role centers on connecting security platforms, optimizing workflows, and enhancing visibility through automation and data integration.

You will design integrations between security platforms, develop Python-based automation, and build Splunk dashboards and data models to strengthen monitoring.

Qualifications

• Active Secret Clearance required.
• Experience progressing from SOC Analyst to Security Engineer or Splunk Engineer.
• Strong hands-on experience with Splunk Enterprise, SPL development, alerting, dashboards, and security tool integrations.
• Proven experience integrating security platforms and threat intelligence into Splunk environments.
• Proficiency in Python scripting, API development, and automation for security operations.

Responsibilities

• Design, implement, and support integrations between security platforms, threat intel systems, case management solutions, and SIEM technologies.
• Develop automation workflows and Python-based solutions to improve alert triage, investigation, escalation, and response processes.
• Build and maintain Splunk dashboards, alerts, correlation searches, custom applications, and data models.
• Establish and manage security telemetry validation processes to ensure data accuracy and reliability.
• Partner with SOC analysts, threat intel teams, and security engineers to streamline workflows and reduce manual tasks.

Skills

Splunk Enterprise

SPL development

Dashboards & alerts

Automation & scripting

Python scripting

Security integrations

API development

Threat intelligence

Security operations

SOAR

Tools

Splunk Enterprise

Job description

Piper Companies is seeking a SOC / Security Automation & Integration Engineer to join a leading cybersecurity and defense-focused organization. The SOC / Security Automation & Integration Engineer will serve as a critical technical resource responsible for connecting security platforms, optimizing operational workflows, and enhancing security visibility through automation and data integration. This role is ideal for a security professional who has progressed from a SOC Analyst background into a security engineering or Splunk engineering position with a strong focus on integrating security technologies and improving detection and response capabilities.

Responsibilities of the SOC / Security Automation & Integration Engineer:

• Design, implement, and support integrations between security platforms, threat intelligence systems, case management solutions, and SIEM technologies.
• Develop automation workflows and Python-based solutions that improve alert triage, incident investigation, escalation, and response processes.
• Build and maintain Splunk dashboards, alerts, correlation searches, custom applications, and data models that enhance security monitoring capabilities.
• Establish and manage security telemetry validation processes to ensure the accuracy, completeness, and reliability of SOC data sources.
• Partner with SOC analysts, threat intelligence teams, and security engineers to streamline workflows, eliminate manual tasks, and strengthen operational efficiency.

Qualifications of the SOC / Security Automation & Integration Engineer:

• Active Secret Clearance required.
• Experience working as a SOC Analyst with progression into a Security Engineer, Splunk Engineer, or similar security-focused engineering role.
• Strong hands-on experience with Splunk Enterprise, SPL development, alerting, dashboards, and security tool integrations.
• Proven experience integrating security platforms, threat intelligence solutions, and operational security technologies into Splunk environments.
• Proficiency in Python scripting, API development, and automation for security operations and orchestration.

Compensation for the SOC / Security Automation & Integration Engineer includes:

• Salary range: $115,000 - $145,000 annually
• Comprehensive benefits package including medical, dental, vision, 401(k), and paid time of.

This job opens for applications on 08/24/2026. Applications for this job will be accepted for at least 30 days from the posting date.

Keywords: SOC Engineer, Security Automation Engineer, Splunk Engineer, Security Integration Engineer, SIEM, Splunk Enterprise, Python, Security Operations Center, Threat Intelligence, OpenCTI, TheHive, Security Automation, Incident Response, Detection Engineering, SOAR, Security Analytics, Secret Clearance