Lead SOC Engineer (SIEM & SOAR)

TL;DR

Lead SOC Engineer (SIEM & SOAR): Delivering SIEM/SOAR management services with an accent on Splunk SIEM and SOAR within the Security Operations Center. Focus on enhancing telemetry, optimizing performance, and designing automation playbooks.

Company/Компания

- One-sentence company description.

What you will do/Что делать

• Deliver Splunk SIEM/SOAR management services within the SOC environment.
• Collaborate with stakeholders to onboard new log sources.
• Maintain and govern SOC critical log sources.
• Enhance and optimize telemetry within the Splunk environment.
• Design SOAR Playbooks for incident automation.
• Assist in mentoring junior SOC engineers.

Requirements/Требования

• 8+ years of experience in SOC operations.
• Bachelor’s degree in a related field.
• Splunk Certified Architect or Administrator.
• Proficiency in SPL and Python scripting.
• Cloud-related certifications preferred.