Splunk Soar

Splunk Soar Cybersecurity Jobs

3 jobs found

9d ago

Security Engineer III, Splunk Architect

Deloitte Arlington, VA

Arlington, VA

9d ago

$103k - $189k/yr Full time Cloud Platforms Cybersecurity Tools Data Security

Apply Now

Job Description

Deloitte is seeking a Security Engineer III, Splunk Architect to design, implement, and optimize Splunk solutions for security monitoring, visibility, and enterprise logging strategies. The position blends hands-on engineering with architecture responsibilities to support threat detection, incident response, and compliance monitoring within a cybersecurity-focused team.

Responsibilities

Design, implement, and optimize Splunk architectures to enable security monitoring, log management, and operational analytics.
Develop and maintain Splunk dashboards, alerts, reports, searches, and data models based on client and business requirements.
Integrate data sources into Splunk, including infrastructure, cloud, application, and security technologies.
Support development of security use cases spanning threat detection, incident response, compliance monitoring, and operational visibility.
Create and maintain architecture diagrams, technical documentation, implementation standards, and administration procedures.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field.
Active Top-Secret Clearance.
Ability to work onsite up to 5 days a week.
2+ years of experience implementing and supporting Splunk Enterprise or Splunk Cloud.
2+ years of experience developing Splunk dashboards, reports, alerts, and saved searches.
Experience onboarding and normalizing log sources from infrastructure, applications, cloud platforms, or security tools.
Understanding of SIEM concepts, security monitoring, or threat detection use cases.
Working knowledge of TCP/IP, networking protocols, and system log analysis.
Experience with Splunk Search Processing Language (SPL), Splunk data models, and role-based access controls.
One or more of the following certifications: Splunk Core Certified Power User, Splunk Enterprise Certified Admin, or Splunk Enterprise Security.
Ability to travel 20% on average based on client needs and sectors.
Legal authorization to work in the United States without employer sponsorship, now or in the future.

Technologies

Splunk Enterprise, Splunk Cloud
Splunk Search Processing Language (SPL)
Splunk dashboards, Splunk data models
Transmission Control Protocol/Internet Protocol (TCP/IP)
SIEM
Python
AWS, Microsoft Azure, Google Cloud Platform (GCP)
Splunk Enterprise Security, Splunk SOAR

Preferred

1+ year of experience supporting Splunk in AWS, Microsoft Azure, or GCP.
5+ years of experience with Splunk Enterprise Security, Splunk SOAR, or security orchestration workflows.
5+ years of experience integrating Splunk with endpoint, identity, firewall, or cloud security tools.
1+ year of experience with Python, automation scripting, or infrastructure as code tools.
Experience supporting regulated or federal environments.

Skills for Success

Ability to work independently and collaborate as part of a team.
Effective written and verbal communication skills.
Meticulous attention to detail and quality of work product.
Ability to build and sustain professional relationships.
Ability to lead projects or workstreams.
Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment.
Strong interpersonal skills and professional demeanor.
Ability to meet deadlines and provide clear guidance to others.

Team

Deloitte’s Cyber team supports businesses with the unique challenges and opportunities in cybersecurity.
Cyber Defense & Resilience helps clients defend against advanced threats by transforming security operations, monitoring technology, data analytics, and threat intelligence.
The offering helps manage and protect dynamic attack surfaces and supports rapid crisis and cyber incident response, enabling clients to be ready for, respond to, and recover from business disruptions.

Location and Pay

Arlington, VA (onsite). Salary range: USD 102,500 - 188,900 per year. Minimum experience: 2 years.

View full job page →

12d ago

Principal Cybersecurity Analyst

UnitedHealth Group Raleigh, NC

Raleigh, NC

12d ago

$113k - $193k/yr Full time Senior Cloud Platforms Cybersecurity Tools

Apply Now

Job Description

In Raleigh, NC with a hybrid work arrangement, enjoy a competitive salary range of USD 112,700 to 193,200 per year, plus a robust benefits package that includes incentive and recognition programs, equity stock purchase opportunities, and 401k contributions. UnitedHealth Group’s Optum Technology Cyber Defense team invites you to lead the design and implementation of Splunk SOAR playbooks and AI powered automation to elevate cybersecurity operations, collaborating closely with Cyber Defense, SOC, and incident response teams.

Responsibilities

Architect, build, and sustain Splunk SOAR playbooks, automations, and custom actions to streamline security operations
Convert complex security operations and incident response needs into scalable, resilient automation solutions
Seamlessly integrate SOAR workflows with security tools, APIs, and enterprise platforms
Design and deploy AI-powered defenses addressing complex cyber challenges while emphasizing responsible AI use
Collaborate with Cyber Defense, SOC, and incident response teams to proactively identify automation opportunities and optimize workflows
Leverage enterprise-approved AI tools to automate repetitive tasks and drive ongoing process improvements
Provide senior technical leadership, mentor analysts, and contribute to automation standards, reusable frameworks, and industry best practices
Evaluate emerging technology trends, including AI advancements, to inform solution design and strategic innovation

Requirements

6+ years of Python development experience
6+ years of cybersecurity experience
Hands-on Splunk SOAR experience, including development of custom applications and actions
Proficiency in Python, API integrations, and automation design
Experience with GitHub and project/work tracking tools such as GitHub Projects
Working knowledge of cloud platforms (AWS, Azure, and GCP)
Proven ability to translate ambiguous or complex requirements into scalable technical solutions

Technologies

Splunk SOAR, Splunk Enterprise Security (ES)
Splunk SPL, Python
GitHub, AWS, Azure, GCP
APIs

Benefits

Comprehensive benefits package
Incentive and recognition programs
Equity stock purchase
401k contribution

Preferred Qualifications

Bachelor's degree in Cybersecurity, Computer Science, or a related technology field (or equivalent professional experience)
Experience with Splunk Enterprise Security (ES) and Splunk SPL
Experience with CI/CD and source control practices for security automation content
Experience creating reusable automation frameworks
Experience with AI agents, LLM-integrated workflows, or AI-assisted analyst workflows
Familiarity with AI governance concepts, including approval workflows, guardrails, and human-in-the-loop design

Application Deadline

This posting will remain active for a minimum of 2 business days or until a sufficient candidate pool is gathered. The posting may close early due to volume of applicants.

View full job page →

30d ago

Cybersecurity Automation Engineer

General Dynamics Information Technology Fort Bragg, NC

Fort Bragg, NC

30d ago Closed

$128k - $173k/yr Full time Automation Cybersecurity Tools Engineer

This position is no longer accepting applications (closed Aug 14, 2026).

Job Description

General Dynamics Information Technology is seeking a Senior Principal Cybersecurity Automation Engineer to lead the engineering and operation of Splunk Phantom SOAR for federal missions. This onsite role at Fort Bragg, NC focuses on integrating security use cases, building reusable Python-based playbooks, and advancing automation across incident handling, threat analysis, and other cyber operations.

Responsibilities

Oversee and maintain the Splunk Phantom SOAR platform and related automation workflows.
Incorporate security use cases into Phantom playbooks and workflows.
Create modular, testable Python-based playbooks that are reusable and efficient.
Configure integrations to ensure Phantom works smoothly with enterprise systems.
Extend Phantom capabilities by developing Security Apps.
Coach security development teams on Phantom functionality.
Leverage Phantom tools to enable automation and orchestration.
Collaborate with the customer to identify integration strategies and advance their Phantom proficiency.
Define requirements for innovative integrations and playbooks.
Partner with security operations, threat intelligence, and incident response teams.
Translate workflows into automated playbooks.
Develop and implement Phantom's flexible app model using various tools and APIs.
Use Python scripts, PowerShell, and Linux commands for integrations.
Facilitate efficient communication via integrated collaboration tools.
Leverage Phantom event and case management for rapid event triage.
Notify CND managers and responders of suspected incidents with detailed histories, statuses, and potential impacts.
Coordinate with higher authorities on intrusions, malware, and related events.
Implement and enforce CND policies and procedures in line with applicable laws and regulations.
Provide incident reports, summaries, and situational awareness to higher headquarters.
Manage incidents from inception through after-action reporting.

Requirements

8+ years of relevant experience
8570 Certification: Minimum IAT level II (e.g., CCNA Security, CySA+, GICSP, GSEC, Security+ CE, SSCP); Level III preferred (e.g., CISSP, GCIH, GCFA, GCIA, GNFA, Linux+, CCNA R&S, Splunk Power User)
Experience with Splunk Phantom, Linux, and PowerShell

Technologies

Splunk Phantom
Python
PowerShell
Linux

Benefits

Growth opportunities through an AI-powered career planning tool that maps steps and learning opportunities
Internal mobility team to help achieve career goals
Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
Award-winning culture of innovation and a military-friendly workplace

Work Requirements

8+ years of related experience
May vary based on technical training, certification(s), or degree
10-25%

Citizenship and Security

US Citizenship
TS/SCI Required

Location

On customer site at Fort Bragg, NC (onsite)

Salary and Benefits Information

Salary range: USD 127,500 - 172,500 per year. This range reflects typical compensation but final compensation will be set based on experience, geographic location, and contractual requirements and may fall outside the stated range.

View full job page →

Splunk Soar Cybersecurity Jobs

Security Engineer III, Splunk Architect

Principal Cybersecurity Analyst

Cybersecurity Automation Engineer

Get Splunk Soar Cybersecurity Jobs alerts