Cyber Security Principal

We’re looking for an experienced Cyber Security Principal to help strengthen security operations and improve incident response. This is a fully remote contract opportunity focused on security automation, threat detection, and supporting incident response teams.

The role is centered around Palo Alto XSOAR, Splunk, and Python, with a regular 8:00 a.m. to 5:00 p.m. shift.

You’ll work closely with security analysts to identify opportunities to automate processes, build and maintain SOAR playbooks, and make incident response more efficient. You’ll also investigate security events, analyze threats and vulnerabilities, and recommend practical ways to improve security monitoring and response.

This is a great fit for someone who enjoys hands-on technical work, solving complex security challenges, and helping teams respond to threats more effectively., * Identify opportunities to improve security operations through automation and orchestration

• Develop, maintain, and improve XSOAR playbooks
• Support incident response analysts in using SOAR tools effectively
• Gather requirements for new automation workflows and recommend process improvements
• Investigate security events, identify unusual activity, and determine root causes
• Analyze vulnerabilities and security risks, then recommend appropriate mitigation steps
• Support incidents from initial investigation through resolution
• Develop security analytics, threat intelligence, and performance metrics
• Communicate findings, potential threats, and recommendations to the appropriate teams

Technology You’ll Work With

• SOAR: Palo Alto XSOAR
• SIEM and Analytics: Splunk
• Programming: Python
• Preferred Tools: CrowdStrike, Proofpoint, Tanium, and Azure
• Additional Knowledge: Digital forensics, networking, and security analytics

Day-to-Day Responsibilities

Most of your time will be spent developing security automations, improving XSOAR playbooks, and helping incident response analysts investigate and resolve security issues. You’ll also collaborate with other teams to identify gaps, improve workflows, and strengthen overall security operations.

• Strong Python skills
• Knowledge of incident response and security operations
• Experience with XSOAR and Splunk
• Data analysis experience
• No specific certifications required

Nice-to-Have Skills

• Experience with CrowdStrike, Proofpoint, or Tanium
• Azure experience
• Knowledge of digital forensics and networking
• Experience building SOAR playbooks and automating security processes