Advanced Cyber Security Engineer

Request ID: 98178-1
Title: Advanced Cyber Security Engineer
Locations: Cincinnati, OH-Open to remote
Duration: 06+ Months with Possible Extension.
Pay Range: $55-$60/Hour on W2 (All inclusive)
ITAR REQUIREMENT

We are seeking an experienced Advanced Cyber Security Engineer with strong expertise in Palo Alto XSOAR, Python development, and Splunk SIEM. The ideal candidate will be responsible for developing and customizing SOAR automation workflows, integrating security tools using REST APIs, and enhancing Security Operations Center (SOC) processes through automation.

This role is heavily focused on XSOAR development (70 80%) with supporting responsibilities in Splunk administration and SIEM integrations (20 30%).

Key Responsibilities

• Develop, customize, and maintain automation workflows on Palo Alto XSOAR.
• Build and enhance XSOAR playbooks, automations, integrations, and incident response workflows.
• Integrate enterprise security tools with XSOAR using REST APIs and Python.
• Develop reusable APIs and connectors for security platforms.
• Onboard new log sources into Splunk or other SIEM platforms.
• Monitor and maintain Splunk environments, dashboards, and data ingestion pipelines.
• Automate repetitive Security Operations Center (SOC) tasks.
• Support incident response activities through security orchestration and automation.
• Evaluate and implement proof-of-concept (PoC) security tools.
• Collaborate with SOC analysts, security engineers, and infrastructure teams.
• Develop technical documentation for automation workflows and integrations.
• Troubleshoot production issues and optimize security automation processes.
• Follow cybersecurity best practices and secure coding standards.

Required Qualifications

• Bachelor's degree in Computer Science, Cyber Security, Information Technology, or a related field.
• 5+ years of software development experience using Python.
• Minimum 2+ years of hands-on experience customizing Palo Alto XSOAR or another SOAR platform.
• Experience with Splunk or other SIEM technologies.
• Strong knowledge of REST APIs and system integrations.
• Experience with Python web frameworks such as:
  • Django
  • Flask
• Strong understanding of Security Operations Center (SOC) processes.
• Excellent analytical and troubleshooting skills.
• Strong written and verbal communication skills.
• Ability to work independently in a fast-paced environment.

Required Technical Skills

Security & SIEM

• Palo Alto XSOAR
• Splunk
• SIEM
• SOAR
• Security Operations Center (SOC)
• Incident Response
• Security Automation

Programming

• Python
• Django
• Flask
• REST APIs
• API Development
• API Integration

Infrastructure

• Linux
• Git
• Nginx

Databases

• SQL
• Relational Databases

Preferred Skills

• JavaScript
• jQuery
• HTML
• CSS
• Threat Intelligence platforms
• Open-source Incident Response tools
• Log Management
• Security Monitoring
• Automation Frameworks
• Secure Coding Practices

Nice-to-Have Skills

• Threat Hunting
• SOC Operations
• Security Engineering
• Cloud Security
• CI/CD
• PowerShell
• Bash
• Scripting Languages
• Technical Documentation

Mandatory Skills

• Palo Alto XSOAR (Mandatory)
• Python Development (Mandatory)
• Splunk SIEM
• REST API Development
• SOAR Customization
• Security Automation
• Linux
• Git