SOAR Engineer

The Opportunity

As a cyber SIEM and SOAR engineer on our team, you’ll be integral to architecting, deploying, and operating security solutions across various DoW clients in the Indo-Pacific. You’ll use your extensive knowledge of cyber security tools and platforms to monitor, detect and respond to potentially malicious cyber behavior that could compromise data, systems or the mission. Create standard operating procedures and configurations for optimal zero trust security posture. Optimize automation speed event review and resolution with analysts, engineers, and administrators. Coordinate with multi-discipline zero trust engineering team to recommend enhanced design and operations. You build the operational playbook and mentor the next set of advanced cybersecurity engineers to help them grow into our nation’s front line of defense. Work with us and build the future of technology for the better.

Responsibilities

• Architect, deploy, and operate security solutions across various DoW clients in the Indo-Pacific
• Monitor, detect and respond to potentially malicious cyber behavior that could compromise data, systems or the mission
• Create standard operating procedures and configurations for optimal zero trust security posture
• Optimize automation speed event review and resolution with analysts, engineers, and administrators
• Coordinate with multi-discipline zero trust engineering team to recommend enhanced design and operations
• Build the operational playbook and mentor the next set of advanced cybersecurity engineers

Requirements

• 3+ years of experience designing, deploying, and configuring security solutions
• Experience with SIEM tools for visibility and analytics, including Elastic
• Experience with SOAR tools including Palo Alto, Splunk, or Tines
• Experience in cyber event analytics and workflow
• Experience documenting and diagraming workflow processes
• Knowledge of scan capabilities, assets management visibility, and patch management systems
• Secret clearance
• HS diploma or GED

Qualifications

• Experience with operating systems including Linux, networking, cloud and containers
• Experience on Red Team activities
• Experience working in federal, DoD, or IC agency environments
• Experience managing and maintaining containerization solutions
• Knowledge of endpoint detection and response (EDR) capabilities
• Knowledge of Torq, Microsoft Sentinel Automation, or Cortex
• Knowledge of security engineering or cloud security
• Knowledge of federal information security policies, standards, procedures, directives, frameworks, federal security authorizations, assessment, and risk management processes for enterprise systems
• Top Secret clearance
• Bachelor's degree in an IT, Cybersecurity, or Engineering field

Pay

The projected compensation range for this position is $86,900.00 to $198,000.00 (annualized USD).