Mid XSOAR Engineer

Job Description

Requirements
- -----------

### Must have:

### - Minimum Bachelors degree in Cybersecurity, Computer Science, or a related field with at least 5 years of relevant experience. - Over 3 years of experience in SOAR Engineering or administration. - More than 2 years managing SOAR within a Federal environment. - Familiarity with enterprise environments, particularly cloud-based and hybrid cloud setups. - Knowledge of security frameworks such as MITRE ATT\&CK, OWASP, and NIST. - Proficiency in troubleshooting, analysis, and technical skills for incident resolution. - Strong written communication abilities to convey technical security analysis to a lay audience. - Awareness of potential attack activities including network reconnaissance, DDoS, and malicious code activity. - Capability to troubleshoot effectively, with strong analytical skills in Linux. - Solid scripting capabilities (e.g., JSPython, PowerShell). - Keen attention to detail, quick learner, and excellent interpersonal skills. - Knowledge and expertise in cybersecurity is an advantage. - Ability to provide technical support to high-tier clients. - Skills in tailored troubleshooting, configuration guidance, and best practices. - Experience managing support cases to document and resolve issues effectively. - Aptitude for multi-vendor troubleshooting on intricate customer engagements. - Proficient in fault isolation and root cause analysis for technical support post-sales. - Certification from DoD Approved 8570 required, e.g., CompTIA Security+, CEH, CFR, CCNA Cyber Ops, CCNA-Security, CYSA+, GCIA, GCIH, or GICSP.

Responsibilities:
- ----------------

- Assist in the configuration, deployment, and maintenance of SOAR technologies within a federal cloud context. - Translate client requirements into effective technical designs and implementations. - Configure SOAR according to DISA STIG and CIS Benchmark standards. - Propose system and process enhancements for ongoing improvement of security operations. - Support security incident responders during system investigations. - Develop dashboards and reports related to SOAR functionalities. - Address tickets pertaining to SOAR configuration modifications and issues. - Maintain a solid understanding of Azure Cloud and possess strong PowerShell scripting skills. - Exhibit a thorough understanding of networking concepts and troubleshooting techniques. - Familiarity with security principles, IAM, VPN, and next-generation firewall systems. - Demonstrate independent troubleshooting capabilities to deliver timely solutions. - Identify flaws or potential areas for improvement in complex systems. - Dedicate 60% of time to SOAR configuration and management tasks. - Allocate 10% of time to assist in incident investigations. - Devote 15% of time to dashboard development and reporting activities. - Spend 10% of time responding to tickets. - Commit 5% of time mentoring junior engineers.
- ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Company:
- -------

We are seeking a highly skilled Cortex XSOAR Engineer to join our remote team. In this role, we offer you the opportunity to work in a dynamic federal security operation that functions 24/7. You will play a pivotal role in deploying and maintaining our SOAR solution, catering to the needs of our clients in a cloud environment. Were dedicated to fostering a collaborative team atmosphere and providing continuous professional development. Join us in our mission to enhance cybersecurity measures and operational efficiency.
- -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------