Role: Advanced Cyber Security Engineer
Operational role on Splunk & XSOAR (our Soar platform). Should have significant experience with development.
Key Responsibilities
· Will work closely on Palo Alto XSOAR platform to customize it as needed
· Will closely integrate existing Security Operation Center (SOC) systems through development and reuse of well-defined APIs
· Working with stakeholders for onboarding new data sources on Splunk (or any other SIEM tool) and perform periodic maintenance activities
· Deploy and evaluate external proof-of-concept tools
· Help with automation of various SOC related manual tasks.
· Must have 70-80% on XSOAR/Phython and 20-30% Splunk Knowledge.
Must Have
· Min. 2 years of experience in customization on any SOAR (Security Orchestration, Automation and Response) tool preferably Palo Alto XSOAR
· Min. 5 years of development experience with Python and web frameworks (Django, Flask)
· Experience with log management and/or SIEM technologies such as Splunk
· Must be a US Citizen