Soar Engineer

Job Title: Senior Privilege Access Monitoring Implementation Specialist

Job ID:26-04094

Location: Remote

Duration: 04 months on W2 contract

Must haves: 4-5 years Splunk experience, 4-5 years IAM experience, monitoring-preferred (previous analyst work)-PLEASE SHOW ON RESUME

Job Summary Seeking a Senior Privilege Access Monitoring Implementation Specialist to design, implement, test, and document privileged access monitoring within a security operations environment. The role focuses on improving privileged access visibility, reducing false positives, and automating alert routing and incident handling using Splunk SIEM and SOAR technologies.

Key Responsibilities Design and implement privileged access monitoring and detection logic. Develop Splunk correlation searches, custom alerts, dashboards, reports, and Risk-Based Alerting. Build SOAR playbooks and automation workflows for incident handling. Integrate SIEM, SOAR, and ticketing systems. Develop alert filtering, suppression, enrichment, and intelligent routing. Create dashboards to monitor alert volume, health, and effectiveness. Validate detections using historical data and optimize alert accuracy. Document searches, workflows, playbooks, runbooks, and operational procedures. Provide knowledge transfer and training to security operations teams.

Required Qualifications 5+ years in security operations, SIEM engineering, security engineering, or related cybersecurity. 4 5 years of hands-on Splunk experience must be clearly shown on resume. 4 5 years of IAM experience must be clearly shown on resume. Previous security monitoring/analyst experience preferred and should be highlighted on resume. Advanced Splunk correlation searches, alerting, dashboards, and Risk-Based Alerting. Strong knowledge of Splunk data pipelines, indexing, field extraction, and search optimization. 2+ years of SOAR experience with Cortex XSOAR, Demisto, or comparable platforms. Experience developing SOAR playbooks, automation, and SIEM/ticketing integrations. 2+ years of privileged access monitoring, IAM/PAM security, or related security operations experience. Understanding of privilege escalation detection, access controls, and authorization frameworks. Demonstrated experience reducing false positives and improving alert fidelity.

Compensation: The hourly rate for this position is $55.00 per hour. Factors which may affect starting pay within this range may include [geography/market, skills, education, experience and other qualifications of the successful candidate].

Benefits: Sunrise offers ACA compliant medical coverage/dental insurance/vision insurance to all employees. We also offer Sick time benefits as required per State regulations.

For applications and inquiries,