Description

You will serve as a subject matter expert focusing on security orchestration, automation, and response.

Responsibilities

• Conduct workshops and requirements gathering sessions to identify automation opportunities within customer security operations.
• Design and develop custom automation workflows, playbooks, and triggers using Splunk SOAR.
• Oversee the deployment and configuration of Splunk SOAR on client environments.
• Develop and maintain custom integrations, connectors, and scripts to extend platform functionality.
• Troubleshoot, optimize, and fine-tune deployed automation solutions to ensure performance.
• Provide training and technical mentoring to customer teams on automation design and workflow management.

Required Skills

• 10+ years of experience in information security.
• 5+ years of hands-on experience with Splunk SOAR (formerly Phantom) and automation development.
• Proficiency in Python for writing automation scripts and enhancing security tasks.
• Experience developing integrations using RESTful APIs, JSON, and XML.
• Working knowledge of AWS.
• Experience with Splunk ITSM (IT Service Intelligence) and existing Splunk infrastructure.
• Deep understanding of incident response, threat intelligence, and security operations workflows.
• Bachelor’s Degree in Computer Science, Information Security, or equivalent work experience.

Key Skills

Education

Bachelor’s Degree in Computer Science, Information Security