Extended Expertise Engineer

Zachary Piper Solutions is seeking an experienced Extended Expertise Engineer to support a leading enterprise cybersecurity platform known for next-generation firewalls, cloud security, zero trust, and AI-driven threat detection. This is an onsite position located at Scott Air Force Base in Illinois and requires an active Top Secret security clearance.

About the role

As an Extended Expertise Engineer, you will work on-site/remote with the client's customer(s) supporting their mission to help them quickly and completely adopt their Endpoint Platform, leaving them more secure. This is a highly technical, hands-on role where you will develop and maintain expert-level skill sets on the products and solutions deployed within the customer's environment.

Responsibilities

• Serve as the primary technical advisor for customers, understanding their business requirements, security objectives, and industry-specific threat landscape to deliver effective security outcomes.
• Lead endpoint protection deployments, operationalization, troubleshooting, optimization, and end-user training to ensure successful adoption and long-term value.
• Drive customer success by providing deployment guidance, accelerating time-to-value, expanding product adoption through new features and innovative use cases, and serving as the product subject matter expert throughout the customer lifecycle.
• Partner with product and engineering teams to resolve technical issues, provide customer feedback, and maximize platform capabilities for customers and partners.
• Perform security operations activities including incident response, threat hunting, detection engineering, alert tuning, custom BIOC development, correlation rule creation, and onboarding new log sources into XDR platforms.
• Support log ingestion, parsing, and integration efforts while leveraging SIEM and XDR technologies to improve detection and response capabilities.
• Troubleshoot networking, endpoint, cloud, and operating system issues across enterprise environments, utilizing scripting and automation where appropriate.

Requirements

• Experience deploying, operationalizing, troubleshooting, and training customers on endpoint protection solutions, with a background as a Security Incident Responder, SOC Analyst, or SOC Manager in customer-facing environments.
• Strong understanding of cloud technologies and security use cases across AWS, Azure, and Google Cloud Platform (GCP), as well as enterprise security products, IT infrastructure, networking fundamentals (TCP/IP, OSI Model), and basic Linux administration and troubleshooting.
• Hands-on experience with threat hunting, detection engineering, alert tuning, custom BIOC development, correlation rule creation, XDR log ingestion and parsing, SIEM platforms (e.g., Splunk), XDR APIs, and query languages such as XQL, SQL, or similar.
• Experience analyzing customer requirements, guiding technical deployments, accelerating product adoption, and serving as a trusted technical advisor throughout the customer lifecycle.
• Familiarity with machine learning applications in cybersecurity and experience developing or maintaining automation scripts in Python or PowerShell.
• Active Top Secret security clearance.
• Ability and willingness to work onsite at Scott AFB, IL.

Pay

Salary Range: $150,000 - $170,000 depending on experience

Benefits

• Medical, Dental, Vision
• 401k Plan
• PTO, Holidays, Sick Leave (if required by law)