Description

You will configure, manage, and optimize SOAR and SIEM platforms, specifically Splunk and Palo Alto, to enhance detection and response capabilities.

This role is on-site.

Responsibilities

• Configure and optimize SOAR and SIEM solutions for operational efficiency.
• Develop and maintain automation scripts using Python, PowerShell, and JavaScript.
• Utilize RESTful APIs to enable communication between disparate security tools.
• Convert MITRE TTPs into misuse cases to improve detection logic.

Required Skills

• 5+ years of experience in SOC operations.
• Hands-on expertise with Splunk and Palo Alto SOAR platforms.
• Proficiency in scripting languages: Python, PowerShell, JavaScript.
• Strong understanding of RESTful API integration for security tools.
• Experience in converting MITRE TTPs to misuse cases.
• Bachelor's degree in a relevant field.

Preferred Skills

• Experience with other major SIEM/SOAR vendors.

Key Skills

Education

Bachelor's degree