SOAR Engineer

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Training & development
• Vision insurance

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Training & development
• Vision insurance

Description
We are seeking a SOAR engineer to display a strong background in security operations, threat detection, and security engineering.

• Responsible for key contributions in developing Threat Defense Solutions, focusing on detection, automation, and development of artificial intelligence (AI) capabilities, which enable the client to achieve measurable growth and maturity.
• Work with in-house teams to identify the right mix of tools, techniques, and procedures to translate customer needs and future goals into a plan that will enable secure and effective solutions.
• Take a critical approach to solution design, identifying gaps, providing alternatives, and customizing solutions to maintain a balance of security and business needs.

Requirements
Required Skills:

• SECRET Clearance
• HS Diploma or GED minimum
• DOD 8570/8140 certified (IAT Level II, e.g. CompTIA Security+)
• Experience supporting DoD or government agencies
• Experience building out security automation capabilities based on analyst requirements
• Experience with playbook development using Security Orchestration and Automated Response (SOAR) platforms such as Tines, Palo Alto XSOAR, Splunk Phantom, or Swimlane
• Experience with programming using Python
• Experience with integrating solutions via APIs and creating custom apps or integrations

Preferred Skills:

• Experience with Linux administration
• Experience with containerization technology such as Docker, Kubernetes, or Podman
• Experience with log management platforms such as the Elastic Stack or Splunk
• Experience supporting Defensive Cyber Operations
• Experience with integrating with AI systems
• Experience with designing and implementing robust, scalable, and efficient CI/CD pipelines
• Experience with Infrastructure as Code (IaC) and Configuration as Code (CaC)
• Experience with application containerization
• Experience with network automation in Python and Ansible
• Knowledge of AI gateway security and Zero Trust Architecture (ZTA) principles