SOAR Engineer

Role Description: We're looking for a Senior Security Orchestration, Automation, and Response (SOAR) Engineer to help build and expand our security automation capabilities. You'll work hands-on with Splunk SOAR, developing playbooks, integrating security technologies, and improving how our SOC investigates and responds to threats. As Hurricane Labs continues to invest in AI and automation, you'll have the opportunity to influence our technical direction, develop new solutions, and play a key role in how we scale our services.

Responsibilities: Design, develop, test, and maintain automated security workflows and playbooks within Splunk SOAR.Build and maintain integrations between SOAR and security platforms, including SIEM, EDR, identity, cloud, and ticketing systems. Use Python, APIs, and scripting to automate investigations, enrichment, response actions, and operational processes. Work closely with SOC analysts, engineers, and customers to identify opportunities for automation and improve incident response. Troubleshoot, optimize, and maintain existing automation workflows to ensure reliability, scalability, and security. Support the development of AI-assisted security operations and mentor team members on automation best practices.

Qualifications: 5-10 years minimum of experience in a SOC environment or InfoSec field. Hands-on experience with Splunk SOAR, including developing, modifying, or troubleshooting playbooks and automated workflows. Strong Python scripting skills and experience working with REST APIs, JSON, and third-party integrations. Understanding of SOC operations, incident response, SIEM technologies, and security detection workflows. Strong troubleshooting and problem-solving skills, with the ability to work independently and communicate effectively with technical teams and customers. Experience in developing, deploying, and tuning of SIEM use cases based on the frameworks such as MITRE ATT&CK.

Salary Range: Starts at $110K/year, depending on experience