Role Description
This is a full-time hybrid role for a SOAR Engineer, located in the Washington DC-Baltimore area, with the flexibility for partial remote work. The SOAR Engineer will design, implement, and optimize SOAR solutions to automate and enhance security operations. Responsibilities include developing and maintaining scalable automation playbooks, integrating security tools (e.g., Cortex XSOAR, Splunk ES), creating workflows, and delivering technical support. Working closely with SOC teams, the engineer will help identify inefficiencies, propose streamlined solutions, and offer guidance on adopting AI-driven and automated security practices.
Qualifications
Expertise in SOAR platforms like Cortex XSOAR or similar tools
Proficiency in developing automation playbooks and integrating security platforms such as Splunk ES, XSIAM, or ServiceNow Security Operations
Strong hands-on skills in programming or scripting, such as Python or JavaScript, for playbook and workflow customization
Experience with AI-driven analytics implementations and automation concepts in a cybersecurity context
Familiarity with industry frameworks like MITRE ATT&CK, NIST, or related compliance requirements
Ability to collaborate with SOC teams and other stakeholders to understand operational challenges and provide tailored solutions
Bachelor's degree in Cybersecurity, Computer Science, or a related discipline, or equivalent work experience
Relevant certifications such as CISSP, CEH, or vendor-specific certifications (e.g., Palo Alto certifications) are a plus