We're looking for an experienced Cyber Security Principal to help strengthen security operations and improve incident response. This is a fully remote contract opportunity focused on security automation, threat detection, and supporting incident response teams.

The role is centered around Palo Alto XSOAR, Splunk, and Python, with a regular 8:00 a.m. to 5:00 p.m. shift.

You'll work closely with security analysts to identify opportunities to automate processes, build and maintain SOAR playbooks, and make incident response more efficient. You'll also investigate security events, analyze threats and vulnerabilities, and recommend practical ways to improve security monitoring and response.

This is a great fit for someone who enjoys hands-on technical work, solving complex security challenges, and helping teams respond to threats more effectively.

Required Skills & Experience

Strong Python skills
Knowledge of incident response and security operations
Experience with XSOAR and Splunk
Data analysis experience
No specific certifications required

Nice-to-Have Skills

Experience with CrowdStrike, Proofpoint, or Tanium
Azure experience
Knowledge of digital forensics and networking
Experience building SOAR playbooks and automating security processes

What You'll Be Doing

Identify opportunities to improve security operations through automation and orchestration
Develop, maintain, and improve XSOAR playbooks
Support incident response analysts in using SOAR tools effectively
Gather requirements for new automation workflows and recommend process improvements
Investigate security events, identify unusual activity, and determine root causes
Analyze vulnerabilities and security risks, then recommend appropriate mitigation steps
Support incidents from initial investigation through resolution
Develop security analytics, threat intelligence, and performance metrics
Communicate findings, potential threats, and recommendations to the appropriate teams

Technology You'll Work With

SOAR: Palo Alto XSOAR
SIEM and Analytics: Splunk
Programming: Python
Preferred Tools: CrowdStrike, Proofpoint, Tanium, and Azure
Additional Knowledge: Digital forensics, networking, and security analytics

Day-to-Day Responsibilities

Most of your time will be spent developing security automations, improving XSOAR playbooks, and helping incident response analysts investigate and resolve security issues. You'll also collaborate with other teams to identify gaps, improve workflows, and strengthen overall security operations.

The Offer

Medical, Dental, Vision insurance
Sick days
Remote

Cyber Security Principal

Key skills

About this role