Security Engineer - SOAR and SIEM Automation

Piper Companies is seeking a Security Engineer to join our internal services consulting team. This role is ideal for a security engineer or consultant with deep expertise in SIEM deployment, SOAR implementation, security automation, and Python development. The successful candidate will work directly with enterprise customers to architect, deploy, migrate, integrate, and optimize security operations platforms while helping clients mature their security monitoring and response capabilities.

This is a client-facing consulting role requiring both strong technical expertise and the ability to communicate effectively with security leaders, analysts, engineers, and executive stakeholders. The ideal candidate has hands-on experience deploying and migrating SIEM and SOAR technologies, building custom automation solutions, and translating business requirements into scalable security operations capabilities. The role closely aligns with modern SIEM engineering, detection development, automation, orchestration, and customer enablement initiatives.

SOAR & Security Automation

• Design, develop, and implement security automation solutions using Python and SOAR platforms.
• Lead customer engagements involving SIEM deployment, migration, integration, and optimization.
• Create custom playbooks, workflows, integrations, and orchestration capabilities to reduce analyst workload.
• Integrate SIEM, SOAR, ticketing, endpoint, cloud, identity, and threat intelligence platforms.
• Identify opportunities to automate incident response, investigation, enrichment, and remediation processes.
• Develop reusable automation frameworks that improve SOC efficiency and scalability.
• Support security operations teams by reducing manual processes and accelerating response times.

Customer Consulting & Advisory

• Serve as a trusted advisor to customer security teams throughout implementation and migration projects.
• Lead technical workshops, requirements-gathering sessions, architecture reviews, and design discussions.
• Present technical recommendations to both technical and executive audiences.
• Collaborate with customer stakeholders to define detection, monitoring, and automation strategies.
• Train and enable customer teams on SIEM and SOAR administration, operations, and best practices.
• Produce high-quality technical documentation, implementation guides, and operational procedures

Required Qualifications

• 6+ years of experience deploying, integrating, and supporting enterprise SIEM platforms.
• 4+ years of hands-on experience implementing security automation and orchestration solutions.
• Extensive Python development experience, including API integrations, automation frameworks, and workflow development.
• Proven experience leading SIEM migration projects and platform transformations.
• Hands-on experience designing and deploying SOAR solutions in enterprise environments.
• Strong understanding of SOC operations, threat detection, incident response, and security monitoring.
• Experience creating and tuning detection rules, correlation logic, and alerting workflows.
• Strong working knowledge of log management, event collection, parsing, normalization, and enrichment.
• Experience leading customer-facing consulting engagements and managing technical stakeholder relationships.
• Excellent written, verbal, and presentation skills.

Compensation & Benefits

• Base Salary: $135,000 - $145,000 ($165,000 - $185,000 OTE)
• Medical, Dental, and Vision Insurance
• 401(k) with Company Match
• Paid Time Off and Paid Holidays
• Sick Leave (as required by law)
• Professional Development and Certification Support
• Remote Work Environment

Keywords:

#LI-RL1

#LI-Onsite

SIEM Consultant, SOAR Consultant, Security Automation Engineer, Security Engineer, Python Developer, Python Automation, SIEM Migration, SIEM Deployment, SOAR Deployment, Security Consulting, Professional Services, Cortex XSOAR, Cortex XSIAM, Splunk, IBM QRadar, Microsoft Sentinel, Detection Engineering, Correlation Rules, Log Management, Log Ingestion, SOC Operations, Incident Response, Threat Detection, Security Orchestration, Security Automation, API Integration, Playbook Development, Security Monitoring, Cybersecurity Consulting, Enterprise Security, Security Engineering, Cloud Security, Threat Intelligence, Detection Content Development, Security Operations Center, Regex, Automation Frameworks, Client-Facing Consultant, Security Platform Integration, SOC Optimization.