SOAR Splunk Engineer

W2 Only

Candidate will work directly with clients.

Job Title: SIEM/SOAR Python Engineer

Location: Hybrid role in Denver, CO or Chicago, IL, Addison, TX OR Charlotte, NC

Duration: 12+ months

Must Have: Candidates MUST have DEVELOPMENT experience with SOAR, Splunk and Python. SOAR is a security automation tool for Splunk.

Job Description:

Work with stakeholders directly to build, design, deliver, re-write, and maintain efficient, reusable, and reliable security automations using Splunk SOAR. This role is highly detail oriented and will require hands-on knowledge of programming languages, APIs, and integrations.

Key Responsibilities:

• Review API documentation and connect third-party services to the SOAR platform.
• This role will be responsible for the whole lifecycle of an automation playbook, from requirements gathering and -planning to design, testing, implementation, and maintenance
• Create detailed technical documentation regarding to your orchestration.
• Collaborate with other internal teams as part of setting up SOAR integrations.
• Follow all change management processes and requirements as part of setting up SOAR integrations.

Skills Requirements:

• 2+ years of hands-on experience in Splunk SOAR, including writing playbooks and troubleshooting.
• 2+ years of hands-on experience using Splunk for both searching/data analysis and for passing data to SOAR.
• Strong programming skills in Python.
• Proficiency with Git.
• Experience working with REST and other third-party API integrations.
• Strong understanding of IT security concepts and practices.
• Familiarity with enterprise change management.
• Strong deductive reasoning and critical thinking skills.
• Strong organization skills.
• Experience with Scrum or other agile development methodologies.