Advanced Cyber Security Engineer @ Remote

Job Title: Advanced Cyber Security Engineer

Location: Remote

Duration: 6+ Months Contract

Key Responsibilities

• Will work closely on Palo Alto XSOAR platform to customize it as needed
• Will closely integrate existing Security Operation Center (SOC) systems through development and reuse of well-defined APIs
• Working with stakeholders for onboarding new data sources on Splunk (or any other SIEM tool) and perform periodic maintenance activities
• Deploy and evaluate external proof-of-concept tools
• Help with automation of various SOC related manual tasks.
• Must have 70-80% on XSOAR/Python and 20-30% Splunk Knowledge.

Must Have Skills

• Min. 2 years of experience in customization on any SOAR (Security Orchestration, Automation and Response) tool preferably Palo Alto XSOAR.
• Min. 5 years of development experience with Python and web frameworks (Django, Flask).
• Experience with log management and/or SIEM technologies such as Splunk.
• Web development frontend skills: JavaScript, jQuery, HTML/CSS.
• Experience in creating and reusing Restful APIs to improve integration between existing and new security systems
• SQL database or any other DBs.
• Good communication skills.
• Highly motivated individual with the ability to self-start, prioritize, and multi-task.
• Interest in cyber security, willingness to follow security best practices.
• Ability to understand code written in other scripting languages.
• Knowledge of incident response (SecOps).
• Eagerness to look for and evaluate available open-source incident response/threat intelligence tools.
• Strong focus on writing high quality technical documentation.
• Good knowledge of Linux, git, nginx.