Cybersecurity Automation Engineer

General Dynamics Information Technology is seeking a Senior Principal Cybersecurity Automation Engineer to lead the engineering and operation of Splunk Phantom SOAR for federal missions. This onsite role at Fort Bragg, NC focuses on integrating security use cases, building reusable Python-based playbooks, and advancing automation across incident handling, threat analysis, and other cyber operations.

Responsibilities

• Oversee and maintain the Splunk Phantom SOAR platform and related automation workflows.
• Incorporate security use cases into Phantom playbooks and workflows.
• Create modular, testable Python-based playbooks that are reusable and efficient.
• Configure integrations to ensure Phantom works smoothly with enterprise systems.
• Extend Phantom capabilities by developing Security Apps.
• Coach security development teams on Phantom functionality.
• Leverage Phantom tools to enable automation and orchestration.
• Collaborate with the customer to identify integration strategies and advance their Phantom proficiency.
• Define requirements for innovative integrations and playbooks.
• Partner with security operations, threat intelligence, and incident response teams.
• Translate workflows into automated playbooks.
• Develop and implement Phantom's flexible app model using various tools and APIs.
• Use Python scripts, PowerShell, and Linux commands for integrations.
• Facilitate efficient communication via integrated collaboration tools.
• Leverage Phantom event and case management for rapid event triage.
• Notify CND managers and responders of suspected incidents with detailed histories, statuses, and potential impacts.
• Coordinate with higher authorities on intrusions, malware, and related events.
• Implement and enforce CND policies and procedures in line with applicable laws and regulations.
• Provide incident reports, summaries, and situational awareness to higher headquarters.
• Manage incidents from inception through after-action reporting.

Requirements

• 8+ years of relevant experience
• 8570 Certification: Minimum IAT level II (e.g., CCNA Security, CySA+, GICSP, GSEC, Security+ CE, SSCP); Level III preferred (e.g., CISSP, GCIH, GCFA, GCIA, GNFA, Linux+, CCNA R&S, Splunk Power User)
• Experience with Splunk Phantom, Linux, and PowerShell

Technologies

• Splunk Phantom
• Python
• PowerShell
• Linux

Benefits

• Growth opportunities through an AI-powered career planning tool that maps steps and learning opportunities
• Internal mobility team to help achieve career goals
• Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
• Award-winning culture of innovation and a military-friendly workplace

Work Requirements

• 8+ years of related experience
• May vary based on technical training, certification(s), or degree
• 10-25%

Citizenship and Security

• US Citizenship
• TS/SCI Required

Location

On customer site at Fort Bragg, NC (onsite)

Salary and Benefits Information

Salary range: USD 127,500 - 172,500 per year. This range reflects typical compensation but final compensation will be set based on experience, geographic location, and contractual requirements and may fall outside the stated range.