SOAR Engineer
Core
Engineer responsible for integrating and maintaining global SIEM and SOAR platforms to automate alert triage and security operations for the U.S. Air Force.
Role type
Senior IC Security Automation Engineer
Builds
Automated security playbooks, integrations between SOAR and third-party security platforms, and cloud-hosted security applications
Domain
Cybersecurity / Defense
Required skills
SOAR platform engineering, SIEM integration, automation playbook development, connector development, cloud application support, security data analysis, technical documentation
Preferred skills
Experience with Palo Alto Cortex XSOAR, Elastic SIEM, Tanium, Microsoft Defender, Patriot, Air Force Cloud One
Technologies
Palo Alto Cortex XSOAR, Elastic SIEM, Tanium, Microsoft Defender, Patriot, Air Force Cloud One
Responsibilities
Develop and maintain integrations between SOAR and U.S. Air Force systems; Design, develop, test, and maintain automation playbooks; Monitor SOAR cluster health and detection-rule performance; Build and troubleshoot connectors and integrations between SOAR and third-party security platforms; Validate dashboards for accuracy and relevance; Analyze system health and performance data to troubleshoot orchestration issues; Support applications hosted in cloud environments.
Seniority
Senior, hands-on IC
