SIEM/SOAR Engineer (Cloud Sec Spec 3)
Location: Washington, DC
Work Authorization: US Citizen
Role Summary
The SIEM/SOAR Engineer builds and configures the Google SecOps SIEM/SOAR environment, ensuring ingestion pipelines, detections, playbooks, and automation workflows are fully operational and optimized for SBA’s enterprise security operations.
Roles & Responsibilities
· Configure ingestion pipelines and validate end‑to‑end log flow.
· Implement Google curated detections and build custom detection rules.
· Develop SOAR playbooks for SBA’s top incident categories.
· Integrate threat intelligence sources (Mandiant, Virus Total).
· Tune detections to meet false‑positive thresholds.
· Support UEBA dashboard configuration and risk scoring.
· Assist with runbook creation, analyst training, and operational transition.
Professional Experience Required
· 10+ years of experience with SIEM/SOAR platforms (Google SecOps preferred).
· Experience building detection rules, automation workflows, and parser validation.
· Experience with cloud telemetry ingestion (Azure, AWS, on-prem).
· Experience with threat intelligence integration.
Educational Qualification
· Bachelor’s degree in Cybersecurity, IT, or related field.
Certifications
· Google SecOps, GIAC, CISSP, or equivalent preferred.
Mission Statement
Softthink Solutions’ mission is to drive continuous innovation in IT services by prioritizing product development and implementing trustworthy computing practices. Our focus on secure and reliable product delivery is backed by sound business practices and a commitment to the long-term satisfaction of our clients in every project, regardless of its size or complexity.
Through our innovative solutions and dedicated team of experts, we strive to exceed our clients’ expectations and set the standard for excellence in the IT industry.
Vision Statement
At Softthink Solutions, our vision is to be a trusted partner for our clients, empowering them to bring their ideas to life in the most efficient and effective manner possible. We are committed to using established best practices, industry-standard processes, and cutting-edge technology to deliver top-notch solutions that exceed expectations.
Our goal is to be recognized as leaders in the industry for our innovative, reliable, and secure IT services and solutions, and to drive the success of our clients through every project we undertake.
Careers
STSI is an independent US-based Software services and consulting partner with a primary focus on long-term relationships with both clients and team members.
STSI offers team members cutting-edge technology, training, and career guidance to expand and grow their skill sets and bring maximum value to our clients.
STSI is constantly reviewing and expanding its people strength and strives to optimally match client needs to team member talents. We are a people-oriented company seeking the best and brightest to join our team. We work with a variety of employment statuses – from citizens to permanent residents to H1B and EAD immigrants. We have openings for entry level as well as senior positions across a variety of specializations with active in-house and client projects.
In an industry that’s constantly reinventing itself, STSI challenges its team members and consultants with engagements that involve specialized services and advanced IT solutions – applying agile development principles, methodical planning, creative thinking, and continuous learning. A dynamic environment keeps our team members ahead of the curve by providing:
- Opportunities to work with leading multinational clients.
- A comprehensive portfolio of solutions that span leading-edge technologies from Enterprise Architecture to Business Intelligence to Quality Assurance
- Established methodologies, processes, and mentoring to maximize efficacy and efficiency.
- A growing R&D division continually exploring and pioneering the latest technological developments in a variety of disciplines.