Splunk Automation and Integration Engineer Security Clearance

Position: Splunk Automation and Integration Engineer with Security Clearance
Piper Companies is hiring a Splunk Automation and Integration Engineer for a leading government-focused cybersecurity and defense technology organization in Research Triangle Park (RTP), NC. This contract opportunity will serve as the SOC's "glue engineering" function, focusing on Splunk engineering, security platform integrations, threat intelligence operationalization, Python-based automation, and the connection of security tools, threat intelligence, data sources, and workflows to create a more automated, reliable, and efficient security operations environment.

Candidates must hold an active Secret Clearance and be available to work onsite in RTP, NC. Responsibilities of the Splunk Automation and Integration Engineer :
* Engineer and maintain integrations between security platforms including OpenCTI, Splunk, and The Hive.
* Develop and support security automation and SOAR-style workflows to improve SOC investigation, triage, escalation, and response processes.
* Build and maintain Splunk applications, dashboards, alerts, saved searches, and data models.
* Integrate security tools, telemetry sources, and threat intelligence feeds into Splunk.
* Develop Python-based automation to reduce manual SOC tasks and improve operational efficiency.
* Design and support SOC data integrity monitoring programs to ensure telemetry accuracy, completeness, and usability.
* Validate field extractions, index data, KVStore values, and search performance across Splunk environments.
* Create alerting and reporting mechanisms to identify data quality issues impacting detection, threat hunting, incident response, and compliance efforts.
* Collaborate with SOC Analysts, Detection Engineers, Threat Intelligence teams, and platform owners to improve security operations workflows. Requirements of the Splunk Automation and Integration Engineer :
* Active Secret Clearance (Required)
* Experience as a SOC Analyst who transitioned into a Security Engineering, Splunk Engineering, or Security Integration role strongly preferred.
* Strong hands-on experience with Splunk Enterprise and SPL.
* Experience integrating security tools, threat intelligence platforms, and telemetry sources into Splunk.
* Python scripting and automation experience.
* Experience with API integrations and security platform interoperability.
* Familiarity with OpenCTI, The Hive, SOAR technologies, or similar security platforms preferred.
* Experience developing custom Splunk applications, dashboards, alerts, and reporting solutions preferred.
* Onsite availability in RTP, NC Location Compensation for the Splunk Automation and Integration Engineer : * $70 - $90+/hour
* Full Comprehensive Benefits:
Health, Vision, Dental, PTO, Paid Holiday and Sick Leave if Required by Law . #LI- KH1 #ONSITE This Job opens 07/29/26 and will be open 30 days after this job posting.