Cybersecurity Automation Engineer
Job Description
Senior Principal Cybersecurity Automation Engineer responsible for designing, deploying, and maintaining Splunk Phantom SOAR for federal missions.
Responsibilities
- Design, deploy, and oversee the Splunk Phantom SOAR platform across security operations
- Integrate security use cases into Phantom to automate detection and response
- Develop reusable, tested, and efficient Python based Playbooks
- Configure systems to enable seamless Phantom integrations with other tools
- Extend the platform by building Security Apps that enhance Phantom capabilities
- Train and mentor security development teams on Phantom features
- Leverage Phantom tools to enable automation and orchestration of security workflows
- Collaborate with the customer to define security integration strategies and grow Phantom expertise
- Define requirements for innovative integrations and playbooks
- Collaborate with security operations, threat intelligence, and incident response teams
- Codify workflows into automated playbooks
- Implement and advance Phantom's flexible app model using diverse tools and APIs
- Use Python scripts, PowerShell, and Linux commands for integrations
- Facilitate efficient communication through integrated collaboration tools
- Utilize Phantom event and case management for rapid incident triage
- Notify CND managers, incident responders, and team members of suspected incidents with detailed histories, statuses, and impacts
- Coordinate with higher authorities on actual or suspected intrusions, malware, and related events
- Implement and enforce CND policies and procedures in compliance with laws and regulations
- Provide incident reports, summaries, and situational awareness to higher headquarters
- Manage incidents from inception through after-action reporting
Requirements
- 8+ years of relevant experience
- 8570 IAT Level II certification minimum (examples: CCNA Security, CySA+, GICSP, GSEC, Security+ CE, SSCP); Level III preferred (examples: CISSP, GCIH, GCFA, GCIA, GNFA, Linux+, CCNA R&S, Splunk Power User)
- Experience with Splunk Phantom, Linux, and PowerShell
Technologies
- Splunk Phantom
- Python
- PowerShell
- Linux
Benefits
- Growth opportunities supported by an AI driven career tool that identifies steps and learning opportunities
- Internal mobility team dedicated to helping you reach career goals
- Comprehensive benefits and wellness packages, 401K with company match, competitive pay, and paid time off
- Award winning culture of innovation and a military friendly workplace
Work Requirements
- 8+ years of related experience
- May vary based on technical training, certification(s), or degree
- Travel or work activity may range from 10 to 25 percent
Citizenship
- US Citizenship required
Location
- On customer site at Fort Bragg, NC (onsite)
Security Clearance
- TS/SCI required
Salary and Benefits Information
The likely salary range for this position is USD 127,500 to 172,500 per year. This is not a guarantee of compensation or salary; final pay will be determined by experience, geographic location, and contractual requirements and could fall outside the stated range.