Splunk SOAR SME

STEM Solutions • Suffolk, VA

10d

About The Position

Splunk SOAR SME Position Overview: We are seeking a highly skilled Splunk SOAR Subject Matter Expert (SME) with strong experience in Splunk Enterprise Security (ES). This role will focus on developing, implementing, and optimizing security automation through SOAR playbooks, while also supporting ES administration, tuning, and use case development. The ideal candidate will bring hands-on expertise in security orchestration, incident response automation, and SIEM optimization in enterprise or DoD environments.

Requirements

• Splunk Core Certified Consultant (required)
• Splunk SOAR Playbook Development Certification (required)
• Splunk SOAR Administration Certification (required)
• Strong hands-on experience with Splunk SOAR (Phantom) and playbook development
• Experience administering and tuning Splunk Enterprise Security (ES)
• Proficiency in SPL (Search Processing Language)
• Experience with incident response, automation, and security operations workflows
• Splunk Enterprise Security Admin Certification must be obtained within 6–12 months of onboarding

Nice To Haves

• Experience supporting Department of Defense (DoD) environments
• Familiarity with security frameworks (NIST, RMF, MITRE ATT&CK)
• Experience integrating SOAR with third-party security tools (EDR, SIEM, ticketing systems)
• Scripting or programming experience (Python preferred for playbook development)

Responsibilities

• Design, develop, and implement cybersecurity-focused Splunk SOAR playbooks to automate incident response and security operations
• Maintain and optimize Splunk SOAR platform, including playbook lifecycle management and integrations
• Perform Splunk Enterprise Security (ES) tuning, configuration, and optimization
• Manage assets and identities within ES to ensure accurate threat detection and correlation
• Develop and enhance ES use cases, correlation searches, and notable event workflows
• Collaborate with security teams to improve detection capabilities and response efficiency
• Integrate SOAR with ES and other security tools to streamline security operations
• Support continuous improvement of security automation, reducing manual effort and response times
• Provide documentation, best practices, and knowledge transfer to stakeholders

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed