Tines Developer / Splunk SOAR Developer

Tines Developer (or Splunk SOAR) Location: Addison, TX, Denver, CO, Chicago, IL, Jacksonville, FL, Washington DC (Onsite 5 days)

Duration: 12 month contract (ext up to 24 months)

We are hiring a senior-level Security Automation Engineer / Architect (contractor) to design and build enterprise-scale automation on Tines at one of the largest banks in the world. This is a hands-on architect role responsible for building safe, auditable, regulator-ready automation that touches hundreds of thousands of assets across security and infrastructure systems.

Required Skills & Experience 10+ years in security engineering, SOAR, or automation engineering — with 5+ years at large enterprise scale, preferably in banking, financial services, or another regulated industry.

Hands-on Tines experience building production workflows at enterprise scale (Stories, Sub-Stories, Cases, Credentials, Tenants, Workbench, AI Actions). Equivalent senior experience on another SOAR (XSOAR, Splunk SOAR, Swimlane) considered with proven ability to ramp quickly on Tines.

Strong Python and REST/GraphQL API integration skills; comfortable with OAuth 2.0, JWT, mTLS, secrets management, and rate-limit / retry / idempotency patterns.

Deep enterprise integration experience across EDR, endpoint management, SIEM, ITSM, IAM, CMDB, vulnerability scanners, threat intel, cloud (Azure / AWS), and CI/CD tooling.

Strong background in vulnerability management, patch operations, and change management across Windows, Linux, macOS, containers, and cloud workloads.

Proven ability to design approval gates, segregation of duties, rollback procedures, and human-in-the-loop controls in automated change workflows.

Experience producing audit and regulatory evidence for automated changes

Strong reliability engineering instincts: monitoring, alerting, replay, versioning, source control, CI/CD-style promotion across environments.

Excellent written and verbal communication; comfortable briefing executives and partnering with audit, risk, and GRC teams.

Preferred Former staff/principal engineer at a large enterprise, large bank, or SOAR vendor.

Tines certifications; CISSP, GIAC, or OSCP a plus (not required).