Senior Security Automation Engineer - 17

Zachary Piper Solutions is seeking a Senior Security Services Consultant for a 100% remote opportunity supporting enterprise customers with SIEM engineering, threat detection, security telemetry, and security automation initiatives. The Senior Security Services Consultant will work directly with customers to onboard and integrate security data, develop and tune detections, improve alert quality, and implement security solutions across Cortex and other enterprise SIEM environments.

Responsibilities of the Senior Security Services Consultant:

• Design, implement, and optimize SIEM and security analytics solutions across enterprise customer environments
• Onboard, integrate, and validate security log sources and telemetry from cloud, endpoint, network, identity, and other security technologies
• Develop and tune detection content, correlation rules, hunting queries, and security analytics
• Normalize, parse, map, and validate security data to ensure accurate and reliable detection capabilities
• Analyze false positives and tune detections to improve alert fidelity and signal-to-noise ratio
• Identify detection gaps and develop threat-informed detection coverage
• Develop Python-based tooling and automation to support detection engineering, log validation, enrichment, and SOC workflows
• Integrate SIEM, SOAR, EDR, threat intelligence, identity, ITSM, and other cybersecurity platforms
• Partner directly with customers and SOC teams to understand security requirements and improve detection and investigation capabilities
• Support the deployment, configuration, integration, and optimization of Cortex and other enterprise security platforms
• Develop dashboards, reporting, technical documentation, runbooks, and engineering standards
• Present technical findings, recommendations, and solutions to technical and non-technical stakeholders

Qualifications for the Senior Security Services Consultant:

• 5+ years of experience in SIEM engineering, detection engineering, security engineering, security operations, or a related cybersecurity discipline
• Hands-on experience engineering SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, Elastic, Cortex XSIAM, or similar technologies
• Experience onboarding log sources, validating security telemetry, parsing data, and normalizing security events
• Experience developing and tuning correlation rules, detection content, hunting queries, and security analytics
• Experience analyzing false positives and improving detection quality and threat coverage
• Strong understanding of SOC operations, incident response, threat detection, and security analytics
• Python or scripting experience supporting security engineering, automation, data validation, enrichment, or analyst workflows
• Experience integrating enterprise security technologies using APIs and other platform interfaces
• Understanding of Linux/Unix systems, networking, authentication protocols, and enterprise security architectures
• Strong troubleshooting, analytical, and problem-solving skills
• Excellent communication skills with the ability to work directly with enterprise customers and technical stakeholders

Preferred Qualifications:

• Experience working in cybersecurity consulting, professional services, MSSP, or other customer-facing security engineering environments
• Experience implementing, deploying, or optimizing SIEM/security platforms across multiple customer environments
• Experience with Cortex XSIAM, Cortex XSOAR, or other Palo Alto security technologies
• Experience with Splunk Enterprise Security, Microsoft Sentinel, QRadar, or Elastic
• Experience with MITRE ATT&CK-based detection engineering and threat-informed defense
• Experience with detection-as-code methodologies, version-controlled detection content, or CI/CD
• Experience with threat hunting and threat intelligence integration
• Experience integrating EDR, IAM, ITSM, cloud security, and other enterprise security platforms
• Experience with SOAR, security orchestration, playbooks, and security automation
• CISSP, GIAC/SANS, Security+, or related cybersecurity certifications

Compensation for the Senior Security Services Consultant includes:

• Salary: $130,000 - $145,000 + Utilization-based bonus with approximately $25,000 in additional compensation at target utilization (77–83%)
• Comprehensive Benefits Package including Medical, Dental, Vision, 401(k), PTO, and Paid Holidays

#LI-MM1 #LI-REMOTE

Keywords: SIEM, Detection Engineering, Security Analytics, Threat Detection, Security Telemetry, Log Onboarding, Log Management, Log Normalization, Correlation Rules, Detection Rules, Alert Tuning, Splunk, Splunk Enterprise Security, Microsoft Sentinel, QRadar, Elastic, Cortex XSIAM, Cortex XSOAR, Python, Security Automation, SOAR, MITRE ATT&CK, Detection-as-Code, Threat Hunting, Threat Intelligence, SOC, Incident Response, Professional Services, Cybersecurity Consulting, Security Engineering