Note: The job is a remote job and is open to candidates in USA. NationMind LLC is a technology consulting firm focused on software development and QA testing services. They are currently hiring an Advanced Cyber Security Engineer to work on customizing the Palo Alto XSOAR platform and integrating SOC systems, while also onboarding new data sources into Splunk.
Responsibilities
- Work closely on the Palo Alto XSOAR platform to customize it as needed
- Integrate existing Security Operations Center (SOC) systems through development and reuse of well-defined APIs
- Work with stakeholders to onboard new data sources into Splunk (or other SIEM tools) and perform periodic maintenance
- Deploy and evaluate external proof-of-concept tools
- Help automate various SOC-related manual tasks
- Must have 70–80% XSOAR/Python and 20–30% Splunk knowledge
Skills
- Minimum 2 years of experience customizing any SOAR (Security Orchestration, Automation and Response) tool, preferably Palo Alto XSOAR
- Minimum 5 years of development experience using Python and web frameworks (Django, Flask)
- Experience with log management and/or SIEM technologies such as Splunk
- US Citizen required
- JavaScript
- JQuery
- HTML/CSS
- REST API development and integration
- SQL Database or other databases
- Strong communication skills
- Self-starter with the ability to prioritize and multitask
- Interest in cybersecurity and security best practices
- Ability to understand code written in other scripting languages
- Knowledge of incident response (SecOps)
- Experience evaluating open-source incident response/threat intelligence tools
- Strong technical documentation skills
- Linux
- Git
- Nginx
Company Overview