> Markdown version of [/jobs/ext/1985270-xsoar-extended-expertise-engineer](https://www.wearedevelopers.com/jobs/ext/1985270-xsoar-extended-expertise-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# XSOAR Extended Expertise Engineer

- **Company:** Zachary Piper
- **Location:** Scott Air Force Base, IL, United States
- **Experience:** Expert
- **Salary:** $140,000.0 - $150,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, ARM Architecture, Microsoft Azure, Cloud Computing, Cyber Security, Intrusion Detection and Prevention, Python (Programming Language), Linux System Administration, Security Information and Event Management, Systems Integration, Scripting, Google Cloud, Data Ingestion, QRadar, Information Technology, Cybercrime, Enterprise Integration, Cortex XSOAR Platform, Splunk, Security Orchestration, Automation & Response
- **Published:** August 8, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9082165/xsoar-extended-expertise-engineer

## About the Role

* 6+ years of experience deploying, integrating, and supporting enterprise SIEM platforms.
 * Hands-on experience with Cortex XSOAR, Cortex XSIAM, Splunk, QRadar, SIEM technologies, XDR platforms, and security automation tools.
 * Experience with detection engineering, threat hunting, SOC operations, log ingestion, correlation rule development, Python scripting, networking, Linux administration, and cloud technologies (AWS, Azure, GCP).
 * Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent professional experience).
 * Active Top Secret Security Clearance required.

## Description

Zachary Piper Solutions is seeking an XSOAR Extended Expertise Engineer to support a company focused on enterprise cybersecurity operations, security automation, and next-generation SIEM/XDR platform adoption. This position is on-site in Scott AFB, IL. The XSOAR Extended Expertise Engineer will serve as a trusted technical advisor responsible for SIEM engineering, detection development, automation, and customer enablement across Cortex XSIAM and Cortex XSOAR environments. Join a mission-driven team helping organizations strengthen their security posture through advanced detection, automation, and operational excellence., * Develop and optimize SIEM log ingestion pipelines while onboarding and maintaining high-value log sources.

 * Create, tune, and manage correlation rules, detections, custom alerts, and threat hunting content.
 * Design and develop security automation workflows and SOAR playbooks utilizing Python and platform integrations.
 * Provide troubleshooting, operational guidance, and best practices for SIEM, SOAR, XDR, cloud, and endpoint security technologies.
 * Deliver customer training, technical documentation, and presentations to both technical and non-technical stakeholders.


## Related Videos

- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [AX is the only Experience that Matters](https://www.wearedevelopers.com/videos/1404-ax-is-the-only-experience-that-matters)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)
- [Oops! Stories of supply chain shenanigans](https://www.wearedevelopers.com/videos/245-oops-stories-of-supply-chain-shenanigans)

## Related Articles

- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters)