Splunk Platform Architect

Bebeeorchestration; São Paulo; Presencial; BRL 120.000 - 160.000; Tempo integral

Resumo da oferta

A leading tech company in São Paulo is seeking a Senior Splunk Orchestration Specialist to lead the design and implementation of advanced SOAR solutions. The role involves collaborating with SOC teams, developing industry standards for automation, and creating custom playbooks for various threats. Candidates should have experience in security orchestration and a strong understanding of Splunk technologies. This position offers the opportunity to enhance threat response strategies and drive innovation in security automation.

Responsabilidades

• Lead the design and implementation of advanced SOAR solutions.
• Collaborate with SOC teams to align SOAR capabilities with threat response.
• Develop and optimize custom SOAR playbooks for various threats.

Descrição da oferta de emprego

Senior Splunk Orchestration Specialist

This is a unique opportunity to lead the design, development and implementation of advanced Security Orchestration, Automation and Response (SOAR) solutions using Splunk SOAR (Phantom) and Splunk Enterprise Security (ES).

About the Role

• Architecture & Automation Enablement: Design, build, and deploy advanced SOAR platforms with a focus on process automation.
• Develop and maintain industry‑leading standards, guidelines, and frameworks for automation and orchestration workflows.
• Collaborate with enterprise SOC teams to align SOAR platform capabilities with threat response strategy.
• Splunk Assessment: Conduct comprehensive Splunk SOAR assessments to evaluate current‑state maturity, integrations, and gaps; provide recommendations for improvements in log ingestion, correlation, automation, and use case coverage. Work closely with Splunk engineers to enhance SOC visibility and response automation.
• Custom Playbook Development: Design, build, and optimize custom SOAR for threat enrichment, triage, phishing, malware, insider threat, and compliance workflows. Ensure playbooks follow industry best practices and are resilient, scalable, and maintainable. Continuously update and refine playbooks to keep pace with evolving threats.
• Automation Strategy & Governance: Develop and implement an automation strategy that ensures seamless integration with SIEM (Splunk Enterprise Security) and third‑party tools. Maintain accurate documentation of architecture, integrations, and playbook workflows. Oversee life‑cycle management, scalability, and compliance for SOAR implementations.