Security Platform Developer, Security Automation (Python, Splunk SOAR)
Core
Develop security automation playbooks and workflows to triage alerts, manage accounts/certificates, and implement security controls across enterprise platforms.
Role type
Security Platform Developer (Automation & SOAR)
Builds
Automated security playbooks, Ansible workflows, and security control implementations
Domain
Financial Services / Cybersecurity Automation
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Python development, Splunk SOAR playbook creation, Ansible workflow development, security incident triage, stakeholder requirement refinement, security technology deployment, on-call incident support, process documentation
Preferred skills
SOAR tools (Cortex XSOAR), security policy planning, EDR/IDS/crypto/certificate management knowledge, SIEM platform knowledge, Windows/Linux OS deployment, enterprise project management, networking/firewall/IPS knowledge, cloud technologies, disaster recovery methods
Technologies
Splunk SOAR, Ansible, Python, YAML, SIEM, EDR, IDS, Firewalls, Cloud platforms
Responsibilities
Develop Python playbooks in Splunk SOAR for alert triage and automation; Create YAML workflows in Ansible for account and certificate management; Triage and remediate errors in automation environments; Collaborate with stakeholders to refine automation requirements; Deploy, support, and maintain new security technologies; Participate in 24x7 on-call support and major incident management; Improve operational security processes; Document and maintain security playbooks and knowledge base articles
Seniority
Mid-level, hands-on IC
