SOAR Engineer - Senior Level
100% Remote
True Zero Technologies
True Zero specializes in creating cybersecurity programs and software solutions that enable agency leaders to run a proactive defense, with better intelligence and more efficient collaboration.
True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that said outcomes begin and end with our people, and that is what we have built, a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top tier services to our customers. In 2023, True Zero was recognized as a “Best Places to Work” in two categories ("Prosperous and Thriving" ($5MM – $50MM in gross revenue) and "Mid-Atlantic Region" (DC, DE, MD, NC, VA, WV)) and in 2022, was recognized as one of Inc. Magazine’s Top 5000 Fastest Growing Companies.
True Zero Technologies is seeking experienced Splunk SOAR engineers or consultants to join our Data Analytics Practice. The position supports the design, implementation, and administration of True Zero's federal customers Splunk SOAR environment, integration with the customers large Enterprise Splunk environment and other various tools. Candidates must possess prior experience working with Splunk SOAR, from both an implementation perspective as well as custom playbook development and workflow defining experience. Candidates with experience in AWS Cloud, Cribl, Syslog, and Axonious is a big plus.
As a TZT consultant, the candidate will receive access to the full knowledge base which is driven by the True Zero community as well as the technical backing of the entire PS team. True Zero encourages collaboration and growth through information sharing and knowledge workshops. The candidate will also have access to our internal Slack channel to stay connected with the team as well as the necessary tools to train, demo, test and grow their professional skills.
We’re actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy:
- Competitive salary, paid twice per month- Best in class medical coverage- 100% of medical premiums covered by True Zero- Company wide new business incentive programs- Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)- 3 weeks of PTO starting + 11 Paid Holidays Annually- 401k Program with 100% company match on the first 4%- Monthly reimbursement of Cell Phone and Home Internet costs- Paternity/Maternity Leave- Investment in training and certifications to broaden and deepen your technical skills
True Zero Technologies is seeking experienced Splunk SOAR engineers or consultants to join our Data Analytics Practice. The position supports the design, implementation, and administration of True Zero's federal customers Splunk SOAR environment, integration with the customers large Enterprise Splunk environment and other various tools. Candidates must possess prior experience working with Splunk SOAR, from both an implementation perspective as well as custom playbook development and workflow defining experience. Candidates with experience in AWS Cloud, Cribl, Syslog, and Axonious is a big plus.
As a TZT consultant, the candidate will receive access to the full knowledge base which is driven by the True Zero community as well as the technical backing of the entire PS team. True Zero encourages collaboration and growth through information sharing and knowledge workshops. The candidate will also have access to our internal Slack channel to stay connected with the team as well as the necessary tools to train, demo, test and grow their professional skills.
Qualification Requirements
- Minimum 8-10 years of relevant market experience
- Splunk SOAR Certification or 2 years of Splunk SOAR or equivalent SOAR platform experience
- Ability to showcase strong knowledge of Python language
- Experience designing and implementing ground up distributed Splunk SOAR installations
- Experience with advanced configuration of Splunk SOAR
- Experience maintaining and administering enterprise Splunk SOAR environments
- Experience developing custom SOAR playbooks, workflows, and configurations
- Experience integrating SOAR platform with other tools from both a data and automation perspective
- Enterprise experience working with large teams or collaborative environments
- Experience working in linux and windows environments, ability to configure:
- Storage subsystems (I.e. partitioning, Volume Groups, Logical Volumes, etc.)
- SELinux and FAPolicyd
- Familiarity with different flavors of Linux distros (RedHat, CentOS, Ubuntu, etc.)
- File Permission Settings (linux/windows)
- Excellent written and oral skills, ability to work closely with multiple customers, manage expectations, and track engagement scope.
Preferred Qualifications
- Splunk Core Consultant Certification
- Adept at extracting value from data and establishing security use cases
- Proficient in establishing standardized practices and documentation
- Possess an understanding of Syslog daemon configuration principles, ideally in Syslog-NG and RSyslog configurations.
- Cloud experience (AWS, Azure, etc.)
- Cribl Experience, working with source/destination definitions, pipelines and PACKS, as well as experience writing regular expressions and building routes
- Experience with Government CDM Programs
- Familiarity with the aggregation tool Axonius
- Development and API experience (Python, Perl, XML)
- Ansible, Spacewalk, and other enterprise automation tool experience.
- Hardware experience and storage experience (SAN, NAS, etc.)
We’re actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy:
- Competitive salary, paid twice per month- Best in class medical coverage- 100% of medical premiums covered by True Zero- Company wide new business incentive programs- Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)- 3 weeks of PTO starting + 11 Paid Holidays Annually- 401k Program with 100% company match on the first 4%- Monthly reimbursement of Cell Phone and Home Internet costs- Paternity/Maternity Leave- Investment in training and certifications to broaden and deepen your technical skills
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Job stats:
1
0
0
Category:
Security Engineering Jobs
Tags: Analytics Ansible APIs Automation AWS Azure Cloud Data Analytics Linux Perl Python SOAR Splunk Ubuntu Windows XML
Perks/benefits: 401(k) matching Career development Competitive pay Health care Medical leave
Region:
Remote/Anywhere
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.
Information Systems Security Officer jobsInformation System Security Officer jobsInformation Security Manager jobsSenior Cloud Security Engineer jobsInformation Security Officer jobsSenior Cybersecurity Engineer jobsSenior Network Security Engineer jobsIT Security Engineer jobsCyber Security Specialist jobsSenior Information Security Analyst jobsSystems Engineer jobsSystems Administrator jobsSecurity Consultant jobsSecurity Specialist jobsIT Security Analyst jobsSenior Cyber Security Engineer jobsChief Information Security Officer jobsInformation System Security Officer (ISSO) jobsInformation Systems Security Engineer jobsSenior Penetration Tester jobsThreat Intelligence Analyst jobsStaff Security Engineer jobsSecurity Operations Analyst jobsSenior Information Security Engineer jobsSenior Product Security Engineer jobs
Java jobsTop Secret jobsMalware jobsGDPR jobsSplunk jobsEDR jobsSaaS jobsForensics jobsRMF jobsIDS jobsSDLC jobsBash jobsSQL jobsIPS jobsDoDD 8570 jobsIntrusion detection jobsThreat detection jobsActive Directory jobsFinance jobsCompTIA jobsGIAC jobsCRISC jobsITIL jobsTerraform jobsDocker jobs
OWASP jobsClearance Required jobsSANS jobsHIPAA jobsIndustrial jobsSOC 2 jobsOSCP jobsCCSP jobsUNIX jobsPolygraph jobsVPN jobsBanking jobsAnsible jobsTCP/IP jobsJavaScript jobsData Analytics jobsDNS jobsSOX jobsSAP jobsIT infrastructure jobsNIST 800-53 jobsSOAR jobsCISO jobsJira jobsMachine Learning jobs