Knowledge of incident response and security operations
Experience with XSOAR and Splunk
Data analysis experience
No specific certifications required
Responsibilities
Identify opportunities to improve security operations through automation and orchestration
Develop, maintain, and improve XSOAR playbooks
Support incident response analysts in using SOAR tools effectively
Gather requirements for new automation workflows and recommend process improvements
Investigate security events, identify unusual activity, and determine root causes
Analyze vulnerabilities and security risks, then recommend appropriate mitigation steps
Communicate findings, potential threats, and recommendations to the appropriate teams
Benefits
Medical Insurance - Four medical plans to choose from for you and your family
Dental & Orthodontia Benefits
Vision Benefits
Health Savings Account (HSA)
Health and Dependent Care Flexible Spending Accounts
Voluntary Life Insurance, Long-Term & Short-Term Disability Insurance
Hospital Indemnity Insurance
401(k) including match with pre and post-tax options
Paid Sick Time Leave
Legal and Identity Protection Plans
Pre-tax Commuter Benefit
529 College Saver Plan
Full Job Description
We're looking for an experienced Cyber Security Principal to help strengthen security operations and improve incident response. This is a fully remote contract opportunity focused on security automation, threat detection, and supporting incident response teams.
The role is centered around Palo Alto XSOAR, Splunk, and Python, with a regular 8:00 a.m. to 5:00 p.m. shift.
You'll work closely with security analysts to identify opportunities to automate processes, build and maintain SOAR playbooks, and make incident response more efficient. You'll also investigate security events, analyze threats and vulnerabilities, and recommend practical ways to improve security monitoring and response.
This is a great fit for someone who enjoys hands-on technical work, solving complex security challenges, and helping teams respond to threats more effectively.
Required Skills & Experience
Strong Python skills
Knowledge of incident response and security operations
Experience with XSOAR and Splunk
Data analysis experience
No specific certifications required
Nice-to-Have Skills
Experience with CrowdStrike, Proofpoint, or Tanium
Azure experience
Knowledge of digital forensics and networking
Experience building SOAR playbooks and automating security processes
What You'll Be Doing
Identify opportunities to improve security operations through automation and orchestration
Develop, maintain, and improve XSOAR playbooks
Support incident response analysts in using SOAR tools effectively
Gather requirements for new automation workflows and recommend process improvements
Investigate security events, identify unusual activity, and determine root causes
Analyze vulnerabilities and security risks, then recommend appropriate mitigation steps
Support incidents from initial investigation through resolution
Develop security analytics, threat intelligence, and performance metrics
Communicate findings, potential threats, and recommendations to the appropriate teams
Technology You'll Work With
SOAR: Palo Alto XSOAR
SIEM and Analytics: Splunk
Programming: Python
Preferred Tools: CrowdStrike, Proofpoint, Tanium, and Azure
Additional Knowledge: Digital forensics, networking, and security analytics
Day-to-Day Responsibilities
Most of your time will be spent developing security automations, improving XSOAR playbooks, and helping incident response analysts investigate and resolve security issues. You'll also collaborate with other teams to identify gaps, improve workflows, and strengthen overall security operations.
The Offer
Medical, Dental, Vision insurance
Sick days
Remote
You will receive the following benefits:
Medical Insurance - Four medical plans to choose from for you and your family
Dental & Orthodontia Benefits
Vision Benefits
Health Savings Account (HSA)
Health and Dependent Care Flexible Spending Accounts
Voluntary Life Insurance, Long-Term & Short-Term Disability Insurance
Hospital Indemnity Insurance
401(k) including match with pre and post-tax options
