about 4 hours ago
Responsibilities
- Design, implement, and maintain SOAR workflows and playbooks for incident response.
- Develop and optimize Python scripts and automation tools for security operations.
- Integrate security tools like CrowdStrike and SIEM platforms for improved response capabilities.
- Create advanced Splunk queries, dashboards, and alerts for threat hunting and monitoring.
- Implement automation solutions in AWS to enforce security controls and monitor compliance.
- Conduct advanced log analysis and anomaly detection for proactive threat detection.
Requirements
- 5+ years of experience in security operations or SOAR engineering, preferably with Tines.
- Strong proficiency in Python and experience with automation scripts or tools.
- Experience with AWS security and cloud automation.
- Familiarity with integrating endpoint security tools and threat intelligence platforms.
- Advanced knowledge of Splunk, including SPL queries and dashboards.
- Excellent problem-solving and communication skills.
Benefits
- Generous time off policies
- Top shelf benefits
- Education, wellness and lifestyle support