Description

You will develop security automation workflows and integrate SOC systems using Splunk and Palo Alto SOAR.

This role is hybrid.

Responsibilities

• Customize the Palo Alto SOAR platform to meet specific operational requirements.
• Integrate existing SOC systems by developing and reusing well-defined APIs.
• Onboard new data sources onto Splunk and perform periodic maintenance activities.
• Automate manual SOC-related tasks to improve operational efficiency.
• Deploy and evaluate external proof-of-concept tools and open-source incident response software.

Required Skills

• 5+ years of development experience using Python and web frameworks like Django or Flask.
• 2+ years of experience customizing a SOAR tool, preferably Palo Alto SOAR.
• 5+ years of experience with log management or SIEM technologies such as Splunk.
• Experience working with Microsoft IAM.
• Proficiency in Linux, git, and nginx.
• Ability to read and understand code written in various scripting languages.
• Experience writing high-quality technical documentation.

Preferred Skills

• Frontend web development skills including JavaScript, jQuery, and HTML/CSS.
• Experience creating and reusing RESTful APIs for security system integration.
• Knowledge of SQL or other database technologies.

Key Skills

Education

Any Graduate