Senior SOAR Engineer - Splunk Automation & Migration

BlackCube Labs; Chicago (IL); On-site; USD 96,000 - 107,000; Full time

Benefits offered by this job

Health Savings Account

Medical, Dental, Vision

401K

Commuter Benefits

Job summary

Genesis10 is seeking a Senior SOAR Engineer for an onsite, 12+ month contract in Chicago area(s). The role focuses on migrating and optimizing SOAR capabilities, with heavy emphasis on Splunk SOAR playbooks, integrations, and Python-based automation.

Responsibilities include building and maintaining playbooks, integrations, and automation workflows, while ensuring security compliance and documentation. The ideal candidate has 5+ years in security automation and strong SPL, APIs, and scripting

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent experience preferred
• 5+ years of experience in security engineering, security automation, or SOAR development
• Hands-on experience with Splunk SOAR, including playbook development, custom app development, custom function development, and platform administration/troubleshooting
• Strong Python programming skills
• Experience writing and optimizing SPL queries
• Experience integrating security technologies through APIs, webhooks, and automation frameworks
• Strong documentation and technical writing skills
• Experience managing and maintaining integration inventories and system dependencies
• Strong analytical, troubleshooting, and problem-solving skills

Responsibilities

• Migration, implementation, and optimization of SOAR platforms and automation capabilities
• Design, develop, test, and maintain Splunk SOAR playbooks, custom applications, and custom functions
• Create and manage integrations between security tools, IT systems, cloud platforms, and third-party technologies
• Develop and maintain Python-based automation solutions to support security operations and incident response
• Utilize SPL to support automation workflows, investigations, and reporting
• Maintain ownership of the orchestration and integration inventory, ensuring accuracy and alignment with operational requirements
• Identify opportunities to automate repetitive security processes and improve response efficiency
• Collaborate with SOC, IR, Engineering, and Infrastructure teams to improve security workflows
• Perform troubleshooting and root cause analysis of automation failures and integration issues
• Develop and maintain technical documentation, architecture diagrams, operational procedures, and knowledge articles
• Ensure solutions adhere to security, compliance, and governance requirements
• Participate in platform upgrades, testing, and continuous improvement efforts

Skills

Splunk SOAR

Python

SPL

REST APIs

Webhooks

Automation

Documentation

Integration inventories

Splunk

Education

Bachelor's degree in Cybersecurity/CS/IT or related field

Tools

Splunk SOAR

Splunk Enterprise Security

Job description

Genesis10 is seeking a Senior SOAR Engineer for an onsite, 12+ month contract in Chicago area(s). The role focuses on migrating and optimizing SOAR capabilities, with heavy emphasis on Splunk SOAR playbooks, integrations, and Python-based automation.

Responsibilities include building and maintaining playbooks, integrations, and automation workflows, while ensuring security compliance and documentation. The ideal candidate has 5+ years in security automation and strong SPL, APIs, and scripting