Security Operations Engineer
Lehi, UT · On-site
Build advanced detection queries in Splunk and deploy enterprise-wide deception strategies aligned with the MITRE ATT&CK framework. You will automate manual triage via Python or SOAR workflows to ...
Security Operations Engineer
Lehi, UT · On-site
Build advanced detection queries in Splunk and deploy enterprise-wide deception strategies aligned with the MITRE ATT&CK framework. You will automate manual triage via Python or SOAR workflows to ...
Build advanced detection queries in Splunk and deploy enterprise-wide deception strategies aligned with the MITRE ATT&CK framework. You will automate manual triage via Python or SOAR workflows to ...
Build advanced detection queries in Splunk and deploy enterprise-wide deception strategies aligned with the MITRE ATT&CK framework. You will automate manual triage via Python or SOAR workflows to ...
Security Operations Engineer
Lehi, UT · On-site
$120K - $180K/yr
Build advanced detection queries in Splunk and deploy enterprise-wide deception strategies aligned with the MITRE ATT&CK framework. You will automate manual triage via Python or SOAR workflows to ...
Security Operations Engineer
Lehi, UT · On-site
$120K - $180K/yr
Build advanced detection queries in Splunk and deploy enterprise-wide deception strategies aligned with the MITRE ATT&CK framework. You will automate manual triage via Python or SOAR workflows to ...
Splunk Soar information
What is the difference between Splunk Soar vs Splunk Security Analyst?
| Aspect | Splunk Soar | Splunk Security Analyst |
|---|---|---|
| Certifications | Splunk Certified SOAR User, Security certifications | CompTIA Security+, CISSP, Splunk certifications |
| Work Environment | Security operations centers, incident response teams | Security teams, SOCs, incident analysis |
| Primary Focus | Automating security workflows, incident response automation | Monitoring security alerts, analyzing threats |
Splunk Soar specializes in automating security incident response and streamlining workflows within security operations centers. In contrast, Splunk Security Analysts focus on monitoring security alerts, analyzing threats, and supporting incident investigations. While both roles require security knowledge and Splunk certifications, Splunk Soar emphasizes automation skills, whereas Security Analysts focus on threat analysis and monitoring.
What are popular job titles related to Splunk Soar jobs in Utah? For Splunk Soar jobs in Utah, the most frequently searched job titles are:
What job categories do people searching Splunk Soar jobs in Utah look for? The top searched job categories for Splunk Soar jobs in Utah are:
What cities in Utah are hiring for Splunk Soar jobs? Cities in Utah with the most Splunk Soar job openings:
Job description
Job Summary:
Pure Storage is fundamentally reshaping the data storage industry and is seeking a Security Operations Engineer to reduce their global attack surface across various environments. The role involves leading initiatives in vulnerability management, Zero Trust architecture, and automating security processes to enhance organizational safety.
Responsibilities:
• Own the Vulnerability & Asset Lifecycle: Drive risk-based remediation across cloud, container, and endpoint environments. You will shift the needle from volume-based reporting to exploitability-led prioritization (EPSS), utilizing asset intelligence to ensure remediation meets SLAs that tangibly reduce organizational risk.
• Engineer Zero Trust & Connectivity: Lead the operational excellence of Zscaler (ZIA/ZPA). You will manage complex SSL/TLS inspection strategies and policy enforcement to provide seamless, secure access while maintaining deep visibility into encrypted traffic flows.
• Eliminate Credential & Secret Risk: Act as the primary architect for secrets detection within CI/CD pipelines. You will partner with DevOps to automate the identification and remediation of exposed credentials, moving security "left" from code to cloud.
• Architect Detection, Deception, & Automation: Build advanced detection queries in Splunk and deploy enterprise-wide deception strategies aligned with the MITRE ATT&CK framework. You will automate manual triage via Python or SOAR workflows to turn raw security data into high-fidelity alerts.
• Validate & Simulate Defenses: Execute targeted adversary simulations and controls validation (e.g., Atomic Red Team) to verify that detections perform as expected, providing risk-rated findings to technical leaders.
• Translate Risk for Stakeholders: Serve as the technical authority who can pivot from deep-packet inspection troubleshooting to delivering "Fix Impact Reports" for executive leadership, quantifying how remediation efforts have eliminated critical threats.
Qualifications:
Required:
• Deep experience in security operations and vulnerability management within enterprise environments.
• Hands-on experience with asset discovery and secrets detection tools such as runZero, TruffleHog, or GitLeaks.
• Technical depth in configuring and operating Zero Trust platforms—specifically Zscaler ZIA/ZPA (including SSL inspection design and policy tuning).
• Experience securing major cloud providers like AWS, GCP, or Azure.
• Proficient in SIEM detection engineering (Splunk) and scripting (Python, PowerShell, or Bash).
• Proven ability to integrate secrets scanning and automated remediation workflows directly into CI/CD pipelines.
• Practical experience with threat emulation and deception technologies mapped to MITRE ATT&CK.
• Ability to partner with engineering teams to prioritize remediation and translate technical risk into business-relevant language.
Company:
Pure Storage is an all-flash enterprise storage company that enables broad deployment of flash in data centers. Founded in 2009, the company is headquartered in Santa Clara, USA, with a team of 5001-10000 employees. The company is currently Late Stage.
Pure Storage is fundamentally reshaping the data storage industry and is seeking a Security Operations Engineer to reduce their global attack surface across various environments. The role involves leading initiatives in vulnerability management, Zero Trust architecture, and automating security processes to enhance organizational safety.
Responsibilities:
• Own the Vulnerability & Asset Lifecycle: Drive risk-based remediation across cloud, container, and endpoint environments. You will shift the needle from volume-based reporting to exploitability-led prioritization (EPSS), utilizing asset intelligence to ensure remediation meets SLAs that tangibly reduce organizational risk.
• Engineer Zero Trust & Connectivity: Lead the operational excellence of Zscaler (ZIA/ZPA). You will manage complex SSL/TLS inspection strategies and policy enforcement to provide seamless, secure access while maintaining deep visibility into encrypted traffic flows.
• Eliminate Credential & Secret Risk: Act as the primary architect for secrets detection within CI/CD pipelines. You will partner with DevOps to automate the identification and remediation of exposed credentials, moving security "left" from code to cloud.
• Architect Detection, Deception, & Automation: Build advanced detection queries in Splunk and deploy enterprise-wide deception strategies aligned with the MITRE ATT&CK framework. You will automate manual triage via Python or SOAR workflows to turn raw security data into high-fidelity alerts.
• Validate & Simulate Defenses: Execute targeted adversary simulations and controls validation (e.g., Atomic Red Team) to verify that detections perform as expected, providing risk-rated findings to technical leaders.
• Translate Risk for Stakeholders: Serve as the technical authority who can pivot from deep-packet inspection troubleshooting to delivering "Fix Impact Reports" for executive leadership, quantifying how remediation efforts have eliminated critical threats.
Qualifications:
Required:
• Deep experience in security operations and vulnerability management within enterprise environments.
• Hands-on experience with asset discovery and secrets detection tools such as runZero, TruffleHog, or GitLeaks.
• Technical depth in configuring and operating Zero Trust platforms—specifically Zscaler ZIA/ZPA (including SSL inspection design and policy tuning).
• Experience securing major cloud providers like AWS, GCP, or Azure.
• Proficient in SIEM detection engineering (Splunk) and scripting (Python, PowerShell, or Bash).
• Proven ability to integrate secrets scanning and automated remediation workflows directly into CI/CD pipelines.
• Practical experience with threat emulation and deception technologies mapped to MITRE ATT&CK.
• Ability to partner with engineering teams to prioritize remediation and translate technical risk into business-relevant language.
Company:
Pure Storage is an all-flash enterprise storage company that enables broad deployment of flash in data centers. Founded in 2009, the company is headquartered in Santa Clara, USA, with a team of 5001-10000 employees. The company is currently Late Stage.
About Pure Storage
Sourced by ZipRecruiter
Pure Storage, founded in 2009, is a technology company headquartered in Mountain View, CA, United States. They operate within the growing industry of data storage solutions and have made a name for themselves in developing all-flash storage hardware and software products. With their focus on delivering an effortless, efficient, and evergreen data platform, Pure Storage has managed to sustainably modernize storage through its Pure Storage FlashArray//m systems and other data-centric architectures that defy the limitations of traditional storage solutions. The company's mission is to enable businesses to improve their performance, gain a competitive advantage, and reduce their operational costs. One of their most notable achievements has been recognized as a leader in the 2019 Gartner Magic Quadrant for Solid-State Arrays for the sixth consecutive year.
Industry
It services
Company size
1,001 - 5,000 Employees
Headquarters location
Mountain View, CA, US
Year founded
2009