SIEM SOAR

Playbook Development:  

• Design, develop, test, and deploy playbooks using the Splunk SOAR visual editor or Python. 

• Translate incident response procedures into automated workflows. 

• Optimize and refine existing playbooks for performance and efficiency. 

Integration & App Development:  

• Hands-on experience with designing/development of splunk applications. 

• Advanced Splunk analytics and the development of custom Splunk applications 

• Splunk data integrations with business-critical enterprise applications and systems. 

• Translating feedback from the business to Splunk technical requirement and solutions. 

• Develop specialized Splunk Security and Compliance applications, add-ons, data models, dashboards,  

• content using Python, Splunk SPL, Splunk SimpleXML (OR JavaScript, CSS), Bash. 

• Develop custom Splunk applications and Add-Ons for inclusion of access events per use case criteria. 

• Develop and configure integrations with third-party security tools (EDR, firewalls, threat intel platforms, ticketing systems, etc.).