- IQUASAR LLC
- St. Louis, MO
- Full-Time
- 46 days ago
SOAR Engineer.
Before you go
Before you leave us, sign up for our email alerts
We don't do job spam, just the best digital jobs delivered straight to your inbox.
SOAR Engineer: our view in 3 lines...
- The Role:This role is for a security engineer focused on SOAR, threat detection, and security automation for DoD or government environments.
- The Person:The person will build security automation, develop SOAR playbooks, integrate custom apps through APIs, and help design secure threat defense solutions.
- Requirements:The ideal candidate has SECRET Clearance, HS Diploma or GED, DOD 8570/8140 certification, experience with Python, APIs, SOAR platforms, Linux administration, Docker, Kubernetes, Splunk, and Ansible.
About the role
Benefits:
- 401(k)
- 401(k) matching
- Dental insurance
- Health insurance
- Paid time off
- Training & development
- Vision insurance
Description
We are seeking a SOAR engineer to display a strong background in security operations, threat detection, and security engineering.Â
- Responsible for key contributions in developing Threat Defense Solutions, focusing on detection, automation, and development of artificial intelligence (AI) capabilities, which enable the client to achieve measurable growth and maturity.Â
- Work with in-house teams to identify the right mix of tools, techniques, and procedures to translate customer needs and future goals into a plan that will enable secure and effective solutions.Â
- Take a critical approach to solution design, identifying gaps, providing alternatives, and customizing solutions to maintain a balance of security and business needs.
Requirements
Required Skills:
- SECRET Clearance
- HS Diploma or GED minimum
- DOD 8570/8140 certified (IAT Level II, e.g. CompTIA Security+)
- Experience supporting DoD or government agencies
- Experience building out security automation capabilities based on analyst requirementsÂ
- Experience with playbook development using Security Orchestration and Automated Response (SOAR) platforms such as Tines, Palo Alto XSOAR, Splunk Phantom, or Swimlane
- Experience with programming using Python
- Experience with integrating solutions via APIs and creating custom apps or integrations
Preferred Skills:
- Experience with Linux administration
- Experience with containerization technology such as Docker, Kubernetes, or Podman
- Experience with log management platforms such as the Elastic Stack or Splunk
- Experience supporting Defensive Cyber Operations
- Experience with integrating with AI systems
- Experience with designing and implementing robust, scalable, and efficient CI/CD pipelinesÂ
- Experience with Infrastructure as Code (IaC) and Configuration as Code (CaC)Â
- Experience with application containerizationÂ
- Experience with network automation in Python and AnsibleÂ
- Knowledge of AI gateway security and Zero Trust Architecture (ZTA) principles