ZipRecruiter

Log In

1

Phishing Splunk Jobs (NOW HIRING)

Venatore Llc

Splunk SOAR Engineer

Tampa, FL · On-site

The Splunk SOAR Engineer will lead the full lifecycle of platform architecture, integration ... phishing, malware, unauthorized access). * Translate manual security procedures into robust ...

Carahsoft Technology Corp

Apply for Position

Reston, VA · On-site

$40K - $50K/yr

Knowledge of phishing techniques, email security, and social engineering tactics. * Knowledge of Splunk and SEIM preferred. Compensation and Benefits * Starting compensation range: $40,000 - $50,000 ...

DataVox

Security Analyst

Houston, TX · On-site

... phishing, malware, lateral movement, identity compromise • Participate in client-facing meetings ... Splunk, CrowdStrike, Sumo Logic, QRadar, Elastic, or similar) • Industry certification: CompTIA ...

GDIT

SOC Manager

Bossier City, LA

A strong working knowledge of Splunk is required - including the ability to build, interpret, and ... Detect the full spectrum of known cyberattacks (DDoS, malware, phishing, ransomware, and others ...

Trew LLC

Cybersecurity Administrator

West Chester, OH · On-site

Monitor SIEM alerts (Splunk) and triage security events; escalate and coordinate incident response ... Support security awareness training and phishing simulation programs for end users * Maintain ...

next page

Showing results 1-20

People also search for

All JobsPhishing Splunk Jobs

Phishing Splunk information

See salary details

$29K

$117K

$158.5K

How much do phishing splunk jobs pay per year?

As of Jun 7, 2026, the average yearly pay for phishing splunk in the United States is $117,001.00, according to ZipRecruiter salary data. Most workers in this role earn between $99,000.00 and $133,500.00 per year, depending on experience, location, and employer.

What is the difference between Phishing Splunk vs Security Analyst?

AspectPhishing SplunkSecurity Analyst
CertificationsSplunk certifications, cybersecurity basicsCompTIA Security+, CISSP, CEH
Work EnvironmentSecurity operations centers, incident response teamsIT departments, security teams across industries
Industry UsageData analysis, threat detection, log managementThreat assessment, incident response, policy enforcement

Phishing Splunk specialists focus on using Splunk tools to detect and analyze phishing attacks, often within security operations centers. Security Analysts have a broader role in monitoring, analyzing, and responding to various security threats, including phishing, using multiple tools and techniques. While both roles require cybersecurity knowledge and certifications, Phishing Splunk roles are more specialized in data analysis with Splunk, whereas Security Analysts have a wider scope in security management.

Infographic showing various Phishing Splunk job openings in the United States as of May 2026, with employment types broken down into 82% Full Time, 2% Part Time, and 16% Contract. Highlights an 84% Physical, 7% Hybrid, and 9% Remote job distribution, with an average salary of $117,001 per year, or $56.3 per hour.
Splunk SOAR Engineer

Splunk SOAR Engineer

Venatore Llc

Tampa, FL • On-site

Full-time

Medical, Dental, Vision, Retirement, PTO

Posted 5 days ago

Job description

About Us
Venatore is a woman-owned small business headquartered in Tampa, Florida, providing mission-driven technology and professional services to federal defense and civilian agencies. We deliver expertise in information technology, engineering, logistics, and program support to help our clients achieve operational excellence and mission success.

About the Job
Venatore is seeking a Splunk SOAR Engineer to support U.S. Central Command (USCENTCOM) operations by designing, implementing, and optimizing enterprise-level Security Orchestration, Automation, and Response (SOAR) capabilities. This role is responsible for transforming manual incident response processes into scalable, automated workflows that accelerate threat detection, containment, and remediation. The Splunk SOAR Engineer will lead the full lifecycle of platform architecture, integration, content development, and performance optimization while collaborating closely with SOC analysts, threat hunters, and incident response teams. An active TS/SCI clearance is required.

Responsibilities

Platform Architecture & Engineering

  • Design, deploy, document, and maintain distributed Splunk SOAR (Phantom) platform architecture to ensure high availability, scalability, and performance.

  • Support system upgrades, patching, and performance tuning across the SOAR infrastructure.

  • Provide advanced troubleshooting and resolution of platform issues and playbook execution errors.

  • Adhere to security best practices and compliance requirements within the operational environment.

Playbook Development & Automation

  • Develop, customize, and maintain complex SOAR playbooks using Python and the Phantom Playbook Editor for automated enrichment, triage, containment, and remediation of security incidents (e.g., phishing, malware, unauthorized access).

  • Translate manual security procedures into robust, automated workflows aligned with SecOps best practices.

  • Establish and track automation metrics, including utilization rates, automation coverage, and Mean Time to Respond (MTTR) improvements.

Integration & Interoperability

  • Integrate Splunk SOAR with Splunk Enterprise Security (ES) and other core security technologies, including EDR/XDR platforms, firewalls, vulnerability scanners, threat intelligence platforms, and ticketing systems.

  • Develop custom apps and integrations to connect proprietary or unsupported security tools using RESTful APIs and custom connectors.

  • Manage and optimize data flow between Splunk ES and Splunk SOAR to ensure effective event-triggered automation actions.

Collaboration & Documentation

  • Partner with SOC analysts, threat hunters, and incident response teams to gather requirements and document workflows.

  • Develop and maintain detailed technical documentation for platform configurations, integrations, and automation content.

  • Provide training and mentorship to SOC staff on SOAR usage, content development, and automation best practices.

  • Evaluate and integrate emerging security technologies and threat intelligence feeds into the automation ecosystem.

Required Qualifications

  • Active TS/SCI security clearance.

  • U.S. citizenship.

  • Applicable DoD 8140 or DoD 8570 certification.

  • 8+ years of related experience in security engineering or security operations.

  • Hands-on expertise with Splunk SOAR (Phantom) administration, configuration, and maintenance in a distributed enterprise environment.

  • Advanced proficiency in Python scripting for playbook development, custom apps, and integrations.

  • Proven experience integrating SOAR platforms with Splunk Enterprise Security (ES), SIEMs, EDR/XDR tools, and other security technologies.

  • Strong understanding of security operations principles, incident response lifecycles, and threat detection methodologies.

  • Experience working with RESTful APIs and developing tool connectors.

  • Proficiency in data manipulation, log parsing, and understanding of the Common Information Model (CIM) in a security context.

  • Strong verbal and written communication skills with the ability to convey complex automation concepts to technical and non-technical audiences.

Preferred Qualifications

  • Familiarity with cloud security logging, containerization (Docker/Kubernetes), and CI/CD pipelines for playbook deployment.

  • Knowledge of the MITRE ATT&CK framework and its application in automated detection and response use cases.

  • Experience using Git or other version control systems for SOAR content management.

  • Familiarity with network protocols, Windows and Linux operating systems, and enterprise security architecture components.

  • Splunk Enterprise Security Certified Admin or Architect certification.

  • Splunk SOAR (Phantom) Certified Content Developer or Administrator certification.

  • Experience with other SOAR platforms (e.g., Palo Alto Cortex XSOAR, IBM Resilient).

  • Experience supporting USCENTCOM or multi-domain defense security operations environments.

  • ITIL 4 Foundation certification.

Benefits
Venatore offers a competitive benefits package designed to support the well-being of our employees, including:

  • Paid Time Off (PTO)

  • 10 Federal Holidays

  • 401(k) with company matching

  • Medical, dental, and vision insurance

  • Paid parental leave

  • Paid military leave

Venatore is an equal opportunity employer and considers qualified applicants without regard to disability or protected veteran status.