SOAR Engineer

Description

We are seeking a SOAR engineer to display a strong background in security operations, threat detection, and security engineering. 

• Responsible for key contributions in developing Threat Defense Solutions, focusing on detection, automation, and development of artificial intelligence (AI) capabilities, which enable the client to achieve measurable growth and maturity. 
• Work with in-house teams to identify the right mix of tools, techniques, and procedures to translate customer needs and future goals into a plan that will enable secure and effective solutions. 
• Take a critical approach to solution design, identifying gaps, providing alternatives, and customizing solutions to maintain a balance of security and business needs.

Requirements

Required Skills:

• SECRET Clearance
• HS Diploma or GED minimum
• DOD 8570/8140 certified (IAT Level II, e.g. CompTIA Security+)
• Experience supporting DoD or government agencies
• Experience building out security automation capabilities based on analyst requirements 
• Experience with playbook development using Security Orchestration and Automated Response (SOAR) platforms such as Tines, Palo Alto XSOAR, Splunk Phantom, or Swimlane
• Experience with programming using Python
• Experience with integrating solutions via APIs and creating custom apps or integrations

Preferred Skills:

• Experience with Linux administration
• Experience with containerization technology such as Docker, Kubernetes, or Podman
• Experience with log management platforms such as the Elastic Stack or Splunk
• Experience supporting Defensive Cyber Operations
• Experience with integrating with AI systems
• Experience with designing and implementing robust, scalable, and efficient CI/CD pipelines 
• Experience with Infrastructure as Code (IaC) and Configuration as Code (CaC) 
• Experience with application containerization 
• Experience with network automation in Python and Ansible 
• Knowledge of AI gateway security and Zero Trust Architecture (ZTA) principles