Optiv Security-posted 6 months ago
Full-time • Mid Level
Herndon, VA
Professional, Scientific, and Technical Services

A Splunk SOAR Engineer is an individual who can operate independently and will be entrusted with delivering success for Optiv + ClearShark's customers to achieve predetermined goals aligned with a statement of work. To be successful in this role, a Level I/III Engineer will be expected to specialize in a capability aligned with Optiv + ClearShark's service practices while also contemplating which future opportunities they would like to explore. Excellent communication skills are essential for this role, as these individuals will interact with clients regularly.

  • Spend 5% of their time focusing on developing corporate strategy, assisting with brand identity, and support operations.
  • Spend 5% of their time focusing on training and fine-tuning skills.
  • Spend 10% of their time managing the day-to-day operations of their team members and their respective career development efforts.
  • Spend 80% of their time on engagement delivery.
  • Execute all tasks outlined in the scope of work and follow standard operating procedures with no direct oversight.
  • Provide assistance for detailed view of notable events, workbook for open investigations, and risk analysis scoring system.
  • Assist and recommend actions in security operations center tier I and tier II incident response incidents.
  • Automate issue resolution and compliance reporting to lower time on detection, time on mitigation for security organizations.
  • Integrate Splunk Mission Control, Splunk Security Orchestration, Automation Response (SOAR), and/or other customer approved security product applications utilizing Enterprise Security.
  • Utilize data thresholds, trend-based conditions and behavioral pattern recognition.
  • Develop and maintain strong relationships with clients to ensure satisfaction.
  • Adhere to availability standards for responding to client inquiries.
  • Lead the communication of technical concepts effectively to clients.
  • Identify and communicate cross-sell and up-sell opportunities with the account team across services.
  • Active TS/SCI clearance with Full Scope polygraph required.
  • Proven experience with Splunk SOAR (formerly Phantom) or similar security orchestration, automation, and response (SOAR) platforms.
  • Strong background in developing and maintaining automation playbooks and scripts.
  • Security Certification (i.e, Security+, CISSP, etc) required.
  • Experience operating in classified environments.
  • Bachelor's degree in a related area or at least 8 years of related work experience.
  • Robust understanding of identity, SIEM, cybersecurity, and infrastructure concepts.
  • Strong Linux and scripting (Python, Ansible, Teraform, JSON, others.) experience.
  • Ability to troubleshoot Splunk instances.
  • Create custom Splunk reports, dashboards, and content per customer requirements.
  • Strong understanding of governance and compliance, specifically with FAR, DFARs, CUI and CMMC.
  • Broad understanding of FedRAMP and IL constructs.
  • Strong understanding of leadership concepts and ideas.
  • Strong interpersonal skills and ability to work collaboratively in a team.
  • Experience leading an engineering team, preferably having handled tasking, resolving personnel issues, and providing actionable feedback.
  • Ability to clearly communicate complex messages to a variety of audiences.
  • Excellent problem-solving skills with a keen attention to detail.
  • Willingness to travel to meet client needs.
  • Open to government workers and/or government experience.
  • A company committed to championing Diversity, Equality, and Inclusion through our Employee Resource Groups.
  • Work/life balance.
  • Professional training resources.
  • Creative problem-solving and the ability to tackle unique, complex projects.
  • Volunteer Opportunities. 'Optiv Chips In' encourages employees to volunteer and engage with their teams and communities.
  • The ability and technology necessary to productively work remotely/from home (where applicable).
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service