Remote SOAR Automation Engineer - Splunk Phantom

Dragonfli Group; Washington (District of Columbia); Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid Time Off (PTO) and 11 Federal Holidays

401(k) employer match

Job summary

A cybersecurity and IT consulting firm seeks a Mid-Senior level SOAR Automation Engineer to design, implement, and scale security automation for a federal agency. This fully remote role involves using Splunk Phantom to enhance security operations and integrate AI services. The ideal candidate has extensive experience in SOAR automation, excellent problem-solving skills, and a strong background in cybersecurity. The position offers competitive benefits, including health insurance, PTO, and 401(k) matching.

Qualifications

• 4+ years of experience building and supporting SOAR/security automation solutions in enterprise environments.
• Hands-on experience with Splunk Phantom (Splunk SOAR).
• Strong background in security workflow automation and playbook development.
• Experience integrating cloud and on-premise systems via APIs.
• Working familiarity with Azure AI services and applied AI use cases in cybersecurity.
• Strong problem-solving and analytical skills.
• Ability to collaborate across technical and non-technical teams.
• Excellent written and verbal communication skills.

Responsibilities

• Design, build, and maintain SOAR automation using Splunk Phantom.
• Develop and enhance automated playbooks to support detection, response, and investigation workflows.
• Integrate SOAR with SIEM, security tools, cloud platforms, and on-prem systems.
• Apply AI-enabled enrichment and decision support using Azure AI services.
• Lead automation design decisions and guide SOC teams on effective SOAR usage.
• Improve dashboards, metrics, and operational visibility tied to automated workflows.
• Collaborate with security analysts, engineers, and stakeholders to identify automation opportunities.
• Operationalize and scale automation across the security lifecycle.
• Ensure reliability, maintainability, and documentation of automation solutions.

Skills

SOAR and AI technologies

Technical and analytical skills

Ability to work collaboratively with security teams

Automated security workflows

Cloud and on-premise system integration

Communication and planning abilities

Problem-solving and critical thinking

Cybersecurity frameworks and standards

Education

Bachelor’s degree in a cyber-related field or equivalent

Tools

Splunk Phantom

Azure AI services

APIs

Job description

A cybersecurity and IT consulting firm seeks a Mid-Senior level SOAR Automation Engineer to design, implement, and scale security automation for a federal agency. This fully remote role involves using Splunk Phantom to enhance security operations and integrate AI services. The ideal candidate has extensive experience in SOAR automation, excellent problem-solving skills, and a strong background in cybersecurity. The position offers competitive benefits, including health insurance, PTO, and 401(k) matching.