Security Automation Engineer

TekStream Solutions; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

A leading company in IT Services is seeking a Splunk SOAR/Phantom Automation Developer to work remotely. The role involves developing playbooks and implementing integrations for an MDR security solution. Candidates should have experience with Splunk SOAR and Python scripting, along with a Bachelor's degree in Computer Science or equivalent. This is a contract position at the mid-senior level.

Qualifications

• 2+ years of experience in Splunk SOAR/Phantom.
• Experience developing playbooks and implementing integrations.
• Knowledge of SOC operations and other SIEM tools.

Responsibilities

• Develop and maintain playbooks for an MDR (Security) solution.
• Integrate with products such as Splunk Enterprise Security.
• Coordinate response efforts with other teams.

Skills

Python scripting

Incident response

Threat analysis

Education

Bachelor’s Degree in Computer Science

Tools

Splunk SOAR

Splunk Enterprise Security

Job description

Direct message the job poster from TekStream Solutions

Splunk SOAR/Phantom Automation Developer

Location: Remote

TekStream is seeking a Splunk resource with experience in Splunk SOAR/Phantom to develop playbooks and implement integrations as part of the playbook development process. The role involves working within Splunk SOAR and collaborating with a team to develop and maintain playbooks for an MDR (Security) solution, integrating with products such as Splunk Enterprise Security.

Requirements:

1. 2+ years of experience developing playbooks and implementing integrations with Splunk SOAR/Phantom in an MDR security context.
2. Proficiency in Python scripting for automation.
3. Experience developing playbooks for Splunk SOAR.
4. Experience with Splunk Enterprise Security.
5. Experience analyzing, hunting, and remediating security threats.
6. Ability to coordinate response efforts with other teams.
7. Ability to abstract threat models and develop incident response processes/workbooks.

Preferred Skills:

1. Bachelor’s Degree in Computer Science or equivalent certifications and training.
2. Splunk certifications, such as Splunk Certified Enterprise Security Administrator.
3. Experience with other SIEM tools and knowledge of SOC operations.

Seniority Level:

Mid-Senior level

Employment Type:

Contract

Job Function:

Engineering and Information Technology

Industries:

IT Services and IT Consulting

Referrals can increase your chances of interviewing at TekStream Solutions by 2x.

Get notified about new Security Engineer jobs in United States.