Develop repeatable processes to develop and troubleshoot playbooks.Analyze SOC alerts statistics and workflows to reduce false positives and accurately focus engineering efforts.Develop custom scripts to automate current detection and response workflows.

Integrate new logging sources and build playbooks to accurately prioritize and respond to security incidents while reducing the time needed to analyze each event.Assess, design, and improve SOC processes and workflows with a focus on integrating automation through Splunk SOAR and CICD platforms.

Work closely with the Security Operations Center (SOC), Incident Response and Security Engineering teams to craft, develop and improve existing automation and deliver resilient security solutions.

This is a hardworking team who has fun, enjoys a good laugh but above all else thinks security first! What you'll get to do The SOAR Engineer will be part of the Cybersecurity Centre of Excellence team and will be a key member in efforts to automate Security Operations Center, Incident Response and Threat Hunting processes. You will have a deep understanding of Information Security principles coupled with a solid grasp of python language and a strong desire to learn and grow within the automation space. In this role, you will be responsible for developing, troubleshooting, and debugging SOAR playbooks and connectors. Learn more about Splunk careers and how you can become a part of our journey! Role Summary At Splunk, we’re committed to our work, customers, having fun and most importantly to each other’s success. We are a company filled with people who are passionate about our product and seek to deliver the best experience for our customers. Join us as we pursue our exciting new vision to make machine data accessible, usable and valuable to everyone.

Download space engineers automation