EngineerJobs.io
← Back to all jobs

Job Description

Senior Principal Cybersecurity Automation Engineer responsible for designing, deploying, and maintaining Splunk Phantom SOAR for federal missions.

Responsibilities

  • Design, deploy, and oversee the Splunk Phantom SOAR platform across security operations
  • Integrate security use cases into Phantom to automate detection and response
  • Develop reusable, tested, and efficient Python based Playbooks
  • Configure systems to enable seamless Phantom integrations with other tools
  • Extend the platform by building Security Apps that enhance Phantom capabilities
  • Train and mentor security development teams on Phantom features
  • Leverage Phantom tools to enable automation and orchestration of security workflows
  • Collaborate with the customer to define security integration strategies and grow Phantom expertise
  • Define requirements for innovative integrations and playbooks
  • Collaborate with security operations, threat intelligence, and incident response teams
  • Codify workflows into automated playbooks
  • Implement and advance Phantom's flexible app model using diverse tools and APIs
  • Use Python scripts, PowerShell, and Linux commands for integrations
  • Facilitate efficient communication through integrated collaboration tools
  • Utilize Phantom event and case management for rapid incident triage
  • Notify CND managers, incident responders, and team members of suspected incidents with detailed histories, statuses, and impacts
  • Coordinate with higher authorities on actual or suspected intrusions, malware, and related events
  • Implement and enforce CND policies and procedures in compliance with laws and regulations
  • Provide incident reports, summaries, and situational awareness to higher headquarters
  • Manage incidents from inception through after-action reporting

Requirements

  • 8+ years of relevant experience
  • 8570 IAT Level II certification minimum (examples: CCNA Security, CySA+, GICSP, GSEC, Security+ CE, SSCP); Level III preferred (examples: CISSP, GCIH, GCFA, GCIA, GNFA, Linux+, CCNA R&S, Splunk Power User)
  • Experience with Splunk Phantom, Linux, and PowerShell

Technologies

  • Splunk Phantom
  • Python
  • PowerShell
  • Linux

Benefits

  • Growth opportunities supported by an AI driven career tool that identifies steps and learning opportunities
  • Internal mobility team dedicated to helping you reach career goals
  • Comprehensive benefits and wellness packages, 401K with company match, competitive pay, and paid time off
  • Award winning culture of innovation and a military friendly workplace

Work Requirements

  • 8+ years of related experience
  • May vary based on technical training, certification(s), or degree
  • Travel or work activity may range from 10 to 25 percent

Citizenship

  • US Citizenship required

Location

  • On customer site at Fort Bragg, NC (onsite)

Security Clearance

  • TS/SCI required

Salary and Benefits Information

The likely salary range for this position is USD 127,500 to 172,500 per year. This is not a guarantee of compensation or salary; final pay will be determined by experience, geographic location, and contractual requirements and could fall outside the stated range.

Similar Jobs