Remote Cyber Security Engineer: Splunk & XSOAR

NATIONMIND LLC; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

NationMind LLC is seeking an Advanced Cyber Security Engineer with strong Python and web framework experience to customize the Palo Alto XSOAR platform and automate SOC tasks. You will integrate SOC systems via APIs and onboard data sources into Splunk or other SIEM tools, while deploying and evaluating open-source tools.

The role requires 5+ years in Python development, 2+ years in SOAR customization, and solid knowledge of Splunk. This is a remote-ready position with US citizenship as a must.

Qualifications

• Minimum 5 years of development experience using Python and web frameworks (Django, Flask).
• Minimum 2 years of customizing any SOAR tool, preferably Palo Alto XSOAR.
• Experience with log management and SIEM technologies such as Splunk.
• US Citizen required.

Responsibilities

• Work closely on the Palo Alto XSOAR platform to customize it as needed.
• Integrate SOC systems through API development and reuse.
• Onboard data sources into Splunk or other SIEM tools and perform maintenance.
• Deploy and evaluate external proof-of-concept tools.
• Help automate various SOC-related manual tasks.
• Balance 70–80% XSOAR/Python with 20–30% Splunk knowledge.

Skills

Python

Django/Flask

REST API development

JavaScript

HTML/CSS

Linux

Git

Strong communication skills

Security best practices

Incident response knowledge

Tools

Palo Alto XSOAR

Splunk

Job description

NationMind LLC is seeking an Advanced Cyber Security Engineer with strong Python and web framework experience to customize the Palo Alto XSOAR platform and automate SOC tasks. You will integrate SOC systems via APIs and onboard data sources into Splunk or other SIEM tools, while deploying and evaluating open-source tools.

The role requires 5+ years in Python development, 2+ years in SOAR customization, and solid knowledge of Splunk. This is a remote-ready position with US citizenship as a must.