Advanced XSOAR Engineer

Prophecy Technologies Corp; Northern (KY); On-site; USD 110,000 - 150,000; Full time

Job summary

Prophecy Technologies Corp is seeking an Advanced Cyber Security Engineer focused on XSOAR customization and Splunk onboarding. The role emphasizes Python development and API-driven SOC integrations, with a strong emphasis on automation of manual SOC tasks and tool evaluation.

The candidate should have extensive experience with Python, Django/Flask, and Splunk, and must be a US citizen. This is a on-site opportunity in the United States with ITAR considerations.

Qualifications

• Minimum 2 years of experience in customization on any SOAR tool, preferably Palo Alto XSOAR.
• Minimum 5 years of development experience with Python and web frameworks (Django, Flask).
• Experience with log management and/or SIEM technologies such as Splunk.
• Must be a US Citizen.

Responsibilities

• Work closely on the Palo Alto XSOAR platform for customization.
• Integrate existing SOC systems through development and reuse of well-defined APIs.
• Collaborate with stakeholders for onboarding new data sources on Splunk and perform periodic maintenance.
• Deploy and evaluate external proof-of-concept tools.
• Assist with the automation of various SOC-related manual tasks.
• Focus 70-80% on XSOAR/Python and 20-30% on Splunk knowledge.

Skills

XSOAR customization

Python development

Splunk / SIEM

US Citizenship

Tools

Django

Flask

RESTful APIs

SQL databases

Job description

This role is for an Advanced Cyber Security Engineer with a focus on operational tasks related to Splunk and Palo Alto XSOAR. The successful candidate will be responsible for customizing the XSOAR platform, integrating existing Security Operation Center (SOC) systems using APIs, and onboarding new data sources onto SIEM tools like Splunk. The position also involves deploying and evaluating external proof-of-concept tools and automating various manual SOC tasks. A significant portion of the role (70-80%) will involve XSOAR and Python development.

Key Responsibilities:

• Work closely on the Palo Alto XSOAR platform for customization.
• Integrate existing Security Operation Center (SOC) systems through development and reuse of well-defined APIs.
• Collaborate with stakeholders for onboarding new data sources on Splunk (or any other SIEM tool) and perform periodic maintenance.
• Deploy and evaluate external proof-of-concept tools.
• Assist with the automation of various SOC-related manual tasks.
• Focus 70-80% on XSOAR/Python and 20-30% on Splunk knowledge.

Required Skills:

• Minimum 2 years of experience in customization on any SOAR tool, preferably Palo Alto XSOAR.
• Minimum 5 years of development experience with Python and web frameworks (Django, Flask).
• Experience with log management and/or SIEM technologies such as Splunk.
• Must be a US Citizen.

Qualifications:

• 6-8+ years of overall experience.
• US Citizen only (ITAR requirement).

Preferred Skills:

• Experience in creating and reusing Restful APIs to improve integration between existing and new security systems.
• Knowledge of SQL database or any other databases.
• Highly motivated individual with the ability to self-start, prioritize, and multi-task.
• Interest in cyber security, willingness to follow security best practices.
• Ability to understand code written in other scripting languages.
• Knowledge of incident response (SecOps).
• Eagerness to look for and evaluate available open-source incident response/threat intelligence tools.
• Strong focus on writing high quality technical documentation.