Description
You will engineer and maintain security automation workflows within the SOAR platform.
This role is on-site.
Responsibilities
- Review API documentation and connect third-party services to the SOAR platform.
- Own the full lifecycle of automation playbooks, from requirements gathering through maintenance.
- Create detailed technical documentation for orchestration designs.
- Collaborate with internal teams to set up SOAR integrations.
- Adhere to all change management processes during SOAR integration setup.
Required Skills
- 5+ years of hands-on experience in Splunk SOAR, including playbook writing and troubleshooting.
- 2+ years of hands-on experience using Splunk for data analysis and passing data to SOAR.
- Strong programming skills in Python.
- Proficiency with Git.
- Experience with REST and other third-party API integrations.
- Strong understanding of IT security concepts and practices.
- Familiarity with enterprise change management.
- Experience with Scrum or other agile development methodologies.