ZipRecruiter

Log In

1

Splunk Soar Jobs in Tennessee (NOW HIRING)

All JobsSplunk Soar JobsSplunk Soar Jobs in Tennessee

Splunk Soar information

What is the difference between Splunk Soar vs Splunk Security Analyst?

AspectSplunk SoarSplunk Security Analyst
CertificationsSplunk Certified SOAR User, Security certificationsCompTIA Security+, CISSP, Splunk certifications
Work EnvironmentSecurity operations centers, incident response teamsSecurity teams, SOCs, incident analysis
Primary FocusAutomating security workflows, incident response automationMonitoring security alerts, analyzing threats

Splunk Soar specializes in automating security incident response and streamlining workflows within security operations centers. In contrast, Splunk Security Analysts focus on monitoring security alerts, analyzing threats, and supporting incident investigations. While both roles require security knowledge and Splunk certifications, Splunk Soar emphasizes automation skills, whereas Security Analysts focus on threat analysis and monitoring.

What are popular job titles related to Splunk Soar jobs in Tennessee? For Splunk Soar jobs in Tennessee, the most frequently searched job titles are:
What job categories do people searching Splunk Soar jobs in Tennessee look for? The top searched job categories for Splunk Soar jobs in Tennessee are:
What cities in Tennessee are hiring for Splunk Soar jobs? Cities in Tennessee with the most Splunk Soar job openings:
Splunk Soar jobs near you

Workflow Automation Engineer

Foreign Resource Development Associates

Nashville, TN • On-site

Full-time

Re-posted 16 days ago

Job description

Description:

Position Summary:

FRDA is looking for a Workflow Automation Engineer to design, build, and optimize automated processes across our security and IT ecosystem. This role focuses on reducing manual effort, improving response times, and ensuring consistent, scalable execution of critical workflows.


This role is ideal for someone looking to have a positive impact on security processes and work with a driven, multi-disciplined team.


This role is onsite in Nashville, TN.


Primary Duties and Responsibilities:

  • Design and implement automated workflows for security and IT operations, including incident response, vulnerability management, and identity lifecycle processes.
  • Integrate systems and tools (e.g., SIEM, EDR, IAM, ticketing platforms, cloud services) using APIs and webhooks.
  • Develop and maintain automation scripts and services primarily in Python or similar languages.
  • Build and manage orchestration within Security Orchestration, Automation, and Response (SOAR) platforms or workflow engines.
  • Ensure workflows, such as logging, monitoring, and alerting, are reliable, scalable, and observable.
  • Collaborate with security and operations teams to translate manual processes into automation.
  • Maintain version control, testing, and deployment pipelines for automation assets.
  • Continuously improve workflows based on incident reviews and operational feedback.
Requirements:

Minimum Qualifications:

  • A minimum of three (3) years of experience in automation, security engineering, DevOps, or related roles.
  • Strong scripting or programming skills (Python preferred).
  • Experience integrating systems via APIs and working with distributed systems.
  • Familiarity with cybersecurity technologies and frameworks such as Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), and Identity and Access Management (IAM).
  • Understanding of security or IT operational processes.
  • Experience with cloud platforms such as AWS, Azure, or GCP.


Preferred Qualifications:

  • Experience with SOAR platforms (e.g., Cortex XSOAR, Splunk SOAR, and Torq).
  • Knowledge of Infrastructure as Code practices such as Terraform.
  • Familiarity with modeling, detection and prevention concepts such as MITRE ATT&CK.
  • Experience working in regulated or compliance-driven environments.