Sr Splunk SOAR Engineer - ONSITE
Sr Splunk SOAR Engineer - ONSITE
Posted on :
03-05-2025
Employer Active
1 Vacancy
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Share
Send me jobs like this
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Job Description
Job Title: Splunk SOAR Engineer
36 months
onsite St Doral FL 33172 USA
*** MUST HAVE SECRET CLEARANCE***
Job Title: Splunk SOAR Engineer
We are seeking a talented and driven Splunk SOAR Engineer to design develop and maintain automation solutions that streamline and accelerate our security operations. In this role you will leverage Splunk SOAR (formerly Phantom) to create robust scalable playbooks integrate diverse security tools and drive automation for threat detection investigation and response. This is a handson technical role that sits at the intersection of security and engineering.
Key Responsibilities Design build and optimize automated playbooks using Splunk SOAR to support incident response and threat management.
Develop and maintain integrations with security tools (e.g. EDR SIEM threat intel platforms firewalls ticketing systems).
Automate repetitive SOC tasks such as enrichment triage response and remediation actions.
Collaborate with SOC analysts engineers and incident responders to identify use cases for automation.
Write custom scripts and connectors (primarily in Python) to extend platform functionality.
Integrate SOAR platform with Splunk.
Maintain documentation for all playbooks integrations and processes.
Monitor and troubleshoot playbook performance and execution issues.
Support ongoing optimization and tuning of automation workflows for accuracy speed and reliability.
Stay informed of emerging threats and best practices in security orchestration and automation.
Qualifications
Required: 2 5 years of experience in a security engineering or SOC environment.
1 year of handson experience with Splunk SOAR (Phantom) or another SOAR platform.
Strong scripting skills in Python.
Experience creating and deploying playbooks or automated workflows.
Familiarity with REST APIs and integrations with security tools (e.g. EDRs SIEMs threat intel AD firewalls).
Understanding of security operations and incident response procedures.
Excellent problemsolving skills and attention to detail. Preferred:
Splunk SOAR Certified Automation Developer or similar certification.
Experience with Splunk ES or other SIEM platforms.
Knowledge of common security frameworks (MITRE ATT&CK NIST etc.).
Experience working with ServiceNow Jira or other ITSM platforms.
We are seeking a talented and driven Splunk SOAR Engineer to design, develop, and maintain automation solutions that streamline and accelerate our security operations. In this role, you will leverage Splunk SOAR (formerly Phantom) to create robust, scalable playbooks, integrate diverse security tools, and drive automation for threat detection, investigation, and response. This is a hands-on technical role that sits at the intersection of security and engineering. Key Responsibilities Design, build, and optimize automated playbooks using Splunk SOAR to support incident response and threat management. Develop and maintain integrations with security tools (e.g., EDR, SIEM, threat intel platforms, firewalls, ticketing systems). Automate repetitive SOC tasks such as enrichment, triage, response, and remediation actions. Collaborate with SOC analysts, engineers, and incident responders to identify use cases for automation. Write custom scripts and connectors (primarily in Python) to extend platform functionality. Integrate SOAR platform with Splunk. Maintain documentation for all playbooks, integrations, and processes. Monitor and troubleshoot playbook performance and execution issues. Support ongoing optimization and tuning of automation workflows for accuracy, speed, and reliability. Stay informed of emerging threats and best practices in security orchestration and automation. Qualifications Required: 2 5 years of experience in a security engineering or SOC environment. 1+ year of hands-on experience with Splunk SOAR (Phantom) or another SOAR platform. Strong scripting skills in Python. Experience creating and deploying playbooks or automated workflows. Familiarity with REST APIs and integrations with security tools (e.g., EDRs, SIEMs, threat intel, AD, firewalls). Understanding of security operations and incident response procedures. Excellent problem-solving skills and attention to detail. Preferred: Splunk SOAR Certified Automation Developer or similar certification. Experience with Splunk ES or other SIEM platforms. Knowledge of common security frameworks (MITRE ATT&CK, NIST, etc.). Experience working with ServiceNow, Jira, or other ITSM platforms.
Employment Type
Full Time
Key Skills
Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.
