Splunk SOAR Engineer

Jobs via Dice

Doral (FL)

On-site

USD 80,000 - 110,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

A client of a leading career platform is seeking a Splunk SOAR Engineer for an 8-week contract in Doral, FL. This hands-on role involves designing and implementing automation solutions to enhance security operations using Splunk SOAR. The position requires strong experience in Python and familiarity with various security tools, making it ideal for candidates looking to impact enterprise security effectively.

Qualifications

2–5 years of experience in a security engineering or SOC environment.
1+ year of hands-on experience with Splunk SOAR (Phantom) or another SOAR platform.
Familiarity with integrations with security tools.

Responsibilities

Design, build, and optimize automated playbooks using Splunk SOAR.
Collaborate with SOC analysts and engineers to identify automation use cases.
Integrate SOAR platform with Splunk and maintain documentation.

Skills

Python

Problem-Solving

Attention to Detail

Education

Splunk SOAR Certified Automation Developer

Tools

REST APIs

ServiceNow

Jira

Job description

1 week ago Be among the first 25 applicants

Dice is the leading career destination for tech experts at every stage of their careers. Our client, Catapult Solutions Group, is seeking the following. Apply via Dice today!

Splunk SOAR Engineer

Onsite | Doral, FL

8 Week Contract

MUST HAVE SECRET CLEARANCE

FOR IMMEDIATE CONSIDERATION, please complete this virtual interview: https://dashboard.catapultsg.com/job/splunk-soar-engineer

We are seeking a talented and driven Splunk SOAR Engineer to design, develop, and maintain automation solutions that streamline and accelerate our security operations. In this role, you will leverage Splunk SOAR (formerly Phantom) to create robust, scalable playbooks, integrate diverse security tools, and drive automation for threat detection, investigation, and response. This is a hands-on technical role that sits at the intersection of security and engineering.

Key Responsibilities:

Design, build, and optimize automated playbooks using Splunk SOAR to support incident response and threat management.
Develop and maintain integrations with security tools (e.g., EDR, SIEM, threat intel platforms, firewalls, ticketing systems).
Automate repetitive SOC tasks such as enrichment, triage, response, and remediation actions.
Collaborate with SOC analysts, engineers, and incident responders to identify use cases for automation.
Write custom scripts and connectors (primarily in Python) to extend platform functionality.
Integrate SOAR platform with Splunk.
Maintain documentation for all playbooks, integrations, and processes.
Monitor and troubleshoot playbook performance and execution issues.
Support ongoing optimization and tuning of automation workflows for accuracy, speed, and reliability.
Stay informed of emerging threats and best practices in security orchestration and automation.

Qualifications:

2–5 years of experience in a security engineering or SOC environment.
1+ year of hands-on experience with Splunk SOAR (Phantom) or another SOAR platform.
Strong scripting skills in Python.
Experience creating and deploying playbooks or automated workflows.
Familiarity with REST APIs and integrations with security tools (e.g., EDRs, SIEMs, threat intel, AD, firewalls).
Understanding of security operations and incident response procedures.
Excellent problem-solving skills and attention to detail. Preferred:
Splunk SOAR Certified Automation Developer or similar certification.
Experience with Splunk ES or other SIEM platforms.
Knowledge of common security frameworks (MITRE ATT&CK, NIST, etc.).
Experience working with ServiceNow, Jira, or other ITSM platforms

Seniority level