Description

You will serve as a subject matter expert for security orchestration, automation, and response (SOAR) within Splunk environments.

This role is on-site.

Responsibilities

• Conduct workshops and requirements gathering to identify automation opportunities in customer security operations.
• Design and develop custom automation workflows, playbooks, and triggers using Splunk SOAR.
• Oversee deployment and configuration of Splunk SOAR on client environments.
• Develop and maintain custom integrations, connectors, and scripts to extend platform functionality.
• Troubleshoot, optimize, and fine-tune deployed automation solutions to ensure performance.

Required Skills

• 10+ years of experience in information security.
• 5+ years of hands-on experience with Splunk SOAR (formerly Phantom) and automation development.
• Proficiency in Python for writing automation scripts and enhancing security tasks.
• Experience developing integrations using RESTful APIs, JSON, and XML.
• Working knowledge of AWS.
• Experience with Splunk ITSM (IT Service Intelligence) and existing Splunk infrastructure.
• Deep understanding of incident response, threat intelligence, and security operations workflows.
• Bachelor’s Degree in Computer Science, Information Security, or equivalent work experience.

Key Skills

Education

Bachelor’s Degree in Computer Science, Information Security