Description
We are seeking a SOAR engineer to display a strong background in security operations, threat detection, and security engineering.
- Responsible for key contributions in developing Threat Defense Solutions, focusing on detection, automation, and development of artificial intelligence (AI) capabilities, which enable the client to achieve measurable growth and maturity.
- Work with in-house teams to identify the right mix of tools, techniques, and procedures to translate customer needs and future goals into a plan that will enable secure and effective solutions.
- Take a critical approach to solution design, identifying gaps, providing alternatives, and customizing solutions to maintain a balance of security and business needs.
Requirements
Required Skills:
- SECRET Clearance
- HS Diploma or GED minimum
- DOD 8570/8140 certified (IAT Level II, e.g. CompTIA Security+)
- Experience supporting DoD or government agencies
- Experience building out security automation capabilities based on analyst requirements
- Experience with playbook development using Security Orchestration and Automated Response (SOAR) platforms such as Tines, Palo Alto XSOAR, Splunk Phantom, or Swimlane
- Experience with programming using Python
- Experience with integrating solutions via APIs and creating custom apps or integrations
Preferred Skills:
- Experience with Linux administration
- Experience with containerization technology such as Docker, Kubernetes, or Podman
- Experience with log management platforms such as the Elastic Stack or Splunk
- Experience supporting Defensive Cyber Operations
- Experience with integrating with AI systems
- Experience with designing and implementing robust, scalable, and efficient CI/CD pipelines
- Experience with Infrastructure as Code (IaC) and Configuration as Code (CaC)
- Experience with application containerization
- Experience with network automation in Python and Ansible
- Knowledge of AI gateway security and Zero Trust Architecture (ZTA) principles