Position Overview

As a Splunk SOAR Cyber Automation Engineer, you will lead the design and development of solutions that automate Cyber and Cloud services and activities. You will develop and optimize data workflows and solution architectures for intelligent storage, query, and exploration of datasets while working closely with clients to integrate secure and scalable security platforms.

Key Responsibilities

• Lead the design and development of solutions to automate Cyber and Cloud services and activities.
• Develop and optimize data workflows and solution architectures for intelligent data storage, query, and exploration.
• Collaborate with clients to integrate highly available, scalable, and secure security platforms across open source and COTS products.
• Develop extensible Cloud-based A&O services for a wide range of Cybersecurity use cases.

Required Qualifications

• 4+ years of experience in security engineering and architecture for highly regulated industries.
• 3+ years of experience with software development or scripting, including Python and Splunk (Search Processing Language, dashboards, and Splunk Enterprise Security).
• 2+ years of experience working with REST APIs to integrate Splunk SOAR with other security and IT tools.
• 1+ years of experience with Linux or Windows logging, administration, and debugging support for automation workflows.
• Experience with network protocols and security principles.
• Ability to work on high impact and high visibility projects as part of a small, dynamic team.
• Active TS/SCI clearance and willingness to take a polygraph exam.
• Education plus experience equivalent to an Associate's degree with 5+ years, Bachelor’s with 3+ years, or Master’s with 1+ year supporting IT projects.
• Active DoD 8570.01-M IAT Level II Certification (e.g., Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND) and the ability to obtain DoD 8570.01-M Cybersecurity Service Provider Certification within 30 days.

Preferred Qualifications

• 1+ year of experience with incident response processes and SOC workflows.
• Experience developing and maintaining technical documentation for playbooks and integrations.
• Proficiency in additional programming languages (e.g., Java, JavaScript, or Ruby) and version control systems (Git, CVS, SVN).
• Experience with AWS or Azure cloud-based solution development and Agile best practices.
• Knowledge of micro-services concepts and SOAR to ES integration.
• Splunk Enterprise Certified Architect and Splunk Enterprise Security Certified Admin certifications.

Benefits & Perks

• Health, life, disability, financial, and retirement benefits
• Paid leave, professional development, tuition assistance, work-life programs, and dependent care
• Recognition awards program for exceptional performance

Compensation: The projected salary range for this position is $86,800.00 to $198,000.00 annually. This range is one component of the total compensation package that includes the benefits listed above.