company_site
SOAR Engineer (SPLUNK)
Nccgroup
Remote, GBR
Mid
Remote
Discovered 1 weeks ago
- Experience with Splunk, Splunk Enterprise Security, Splunk SOAR (Formerly Splunk Phantom) and Splunk User Behaviour Analytics - Develop, and implement automations for detection and response. - Produce System Analytics to prove automation behaviour assumptions - A passion for security automation and a solid understanding of security incident response - Knowledge of security frameworks including MITRE ATT&CK, NIST, etc. - Working experience and knowledge of operating systems (e.g.: Windows, UNIX/Linux) and databases - Knowledge in various scripting and programming languages (Java, Perl, R, Python, C++) Desirable: - Understanding of NIS regulations - Understanding of CNI and ideally the Energy Sector. Ideally having worked on a CNI environment/client. - Understanding of NCSC CAF and IT/OT controls such as NIST - Integration of SOAR (Splunk) with OT specific IDS such as Nozomi, Claroty, Dragos, etc. - Playbook development.
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanKey skills for this role
- Experience with Splunk, Splunk Enterprise Security, Splunk SOAR (Formerly Splunk Phantom) and Splunk User Behaviour Analytics - Develop, and implement automations for detection and response. - Produce System Analytics to prove automation behaviour assumptions - A passion for security automation and a solid understanding of security incident response - Knowledge of security frameworks including MITRE ATT&CK, NIST, etc. - Working experience and knowledge of operating systems (e.g.: Windows, UNIX/Linux) and databases - Knowledge in various scripting and programming languages (Java, Perl, R, Python, C++) Desirable: - Understanding of NIS regulations - Understanding of CNI and ideally the Energy Sector. Ideally having worked on a CNI environment/client. - Understanding of NCSC CAF and IT/OT controls such as NIST - Integration of SOAR (Splunk) with OT specific IDS such as Nozomi, Claroty, Dragos, etc. - Playbook development.
Key Skills for This Role
- Experience with Splunk, Splunk Enterprise Security, Splunk SOAR (Formerly Splunk Phantom) and Splunk User Behaviour Analytics - Develop, and implement automations for detection and response. - Produce System Analytics to prove automation behaviour assumptions - A passion for security automation and a solid understanding of security incident response - Knowledge of security frameworks including MITRE ATT&CK, NIST, etc. - Working experience and knowledge of operating systems (e.g.: Windows, UNIX/Linux) and databases - Knowledge in various scripting and programming languages (Java, Perl, R, Python, C++) Desirable: - Understanding of NIS regulations - Understanding of CNI and ideally the Energy Sector. Ideally having worked on a CNI environment/client. - Understanding of NCSC CAF and IT/OT controls such as NIST - Integration of SOAR (Splunk) with OT specific IDS such as Nozomi, Claroty, Dragos, etc. - Playbook development.
Full Job Posting
Key Responsibilities
Work in partnership with the incident response team to design, identify, and implement opportunities for improvement
Develop, and implement automations for detection and response.
Be the subject matter experts on big data analytics and automation
Participate in special projects, as needed, and perform other duties as assigned
Produce System Analytics to prove automation behaviour assumptions
Document all system changes in line with Change Management good practices
Recommend, Develop and Release new Use Cases to maximize the benefits and efficiencies from a SOAR platform.
Mentor junior members of the SOAR team.
Complete Quality Assurance on work completed by other members of the team before it is implemented in production.
Skills, Knowledge and Expertise
Experience with Splunk, Splunk Enterprise Security, Splunk SOAR (Formerly Splunk Phantom) and Splunk User Behaviour Analytics
A passion for security automation and a solid understanding of security incident response
Knowledge of security frameworks including MITRE ATT&CK, NIST, etc.
Working experience and knowledge of operating systems (e.g.: Windows, UNIX/Linux) and databases
Knowledge in various scripting and programming languages (Java, Perl, R, Python, C++)
Understanding of NIS regulations
Understanding of CNI and ideally the Energy Sector. Ideally having worked on a CNI environment/client.
Understanding of NCSC CAF and IT/OT controls such as NIST
Integration of SOAR (Splunk) with OT specific IDS such as Nozomi, Claroty, Dragos, etc.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Nccgroup
Associate SOC Analyst
Manchester, GBR
Discovered Yesterday
Management Accountant
Manila, USA
Discovered 2 days agoFull-time
Salesforce Technical Consultant
Manila, USA
Discovered 2 days agoFull-time
Associate Program Manager
Manila, USA
Discovered 2 days agoFull-time
Sales Development Representative
Central, USA
Discovered 2 days agoFull-time
Senior Account Executive
Chicago, USA
Discovered 5 days agoFull-time
Senior Sales Specialist MXDR
Cheltenham, GBR
Discovered 5 days ago
Strategic Cyber Advisory Director
, USA
Discovered 5 days ago
