SOAR Engineer, Senior

What you'll do

• Design, implement, and maintain Splunk SOAR playbooks to automate incident response and streamline analyst workflows.
• Develop and maintain phishing automation pipelines using Cofense Triage and Splunk SOAR for rapid threat disposition.
• Provide cybersecurity architecture and engineering support for Zero-Trust, TIC 3.0, EDR, and SASE initiatives.
• Engineer and optimize automated incident response capabilities across the enterprise to reduce manual effort.
• Write clear technical documentation, engineering procedures, and playbooks for SOC and IR teams.
• Perform orchestration, automation, and remediation tasks using Python and Splunk Processing Language (SPL).
• Mentor and supervise team members to ensure high-quality engineering and automation outputs.

What we're looking for

• 6+ years of experience in cybersecurity engineering, including orchestration, automation, and remediation.
• Experience implementing and maintaining Splunk SOAR playbooks, Python, and Splunk Processing Language (SPL) queries.
• Experience with enterprise security technologies such as EDR, SIEM, firewalls, or identity security platforms.
• Knowledge of incident response processes, including triage, enrichment, containment, and documentation.
• Knowledge of Zero Trust principles, TIC 3.0 concepts, or modern security architecture frameworks.
• Ability to write clear technical documentation, playbooks, and engineering procedures for SOC and IR teams.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination.
• Bachelor’s degree.