Job Title: SOAR Engineer
Location: Remote
Duration: 12+ Months Contract
Rate: $120/hr W2
Interview Process: 1 round, Virtual/Online - potential for a 2nd round onsite as needed
Possible second in-person interview for which Beechwood will pay Airfare
DAILY DUTIES / RESPONSIBILITIES:
PROVIDE TECHNICAL EXPERTISE AND EXPERIENCE IN CREATING EFFICIENT AUTOMATION WORKFLOWS.
DEVELOP, IMPLEMENT AUTOMATIONS AND OPTIMIZE EXISTING AUTOMATIONS IN RESPONSE TO SECURITY ALERTS AND INCIDENTS.
BUILD AND MAINTAIN INTEGRATIONS WITH THE SOAR PLATFORM.
CREATE CUSTOM SCRIPTS WHEN REQUIRED TO PROVIDE FUNCTIONALITY NOT SUPPORTED OUT OF THE BOX INTEGRATIONS.
DOCUMENT PROCESSES, RUNBOOKS, AND TROUBLESHOOTING STEPS RELATED TO THE SOAR AND INTEGRATIONS.
PROACTIVELY COORDINATE WITH ENGINEERING, SOC, AND IR SUPPORT AS NEEDED TO MEET GOALS.
ADDITIONAL SKILLS/DUTIES:
EXPERIENCE WITH DASHBOARD CREATION AND REPORTING.
EXCELLENT COMMUNICATION AND CUSTOMER SERVICE SKILLS FOR AGENCY-FACING ENGAGEMENT.
REQUIRED EDUCATION/CERTIFICATIONS:
BACHELOR'S DEGREE IN AN INFORMATION TECHNOLOGY OR INFORMATION SECURITY RELATED FIELD
EIGHT YEARS OF RELEVANT WORK EXPERIENCE MAY BE SUBSTITUTED IN LIEU OF EDUCATION
FIVE YEARS OF EXPERIENCE IN SUPPORTING LARGE IT ENVIRONMENTS AND/OR SYSTEM DEPLOYMENTS
5+ YEARS OF EXPERIENCE WITH AUTOMATION PLATFORMS OR SOAR SOLUTIONS.
STRONG SCRIPTING AND AUTOMATION SKILLS (PYTHON, BASH, POWERSHELL, OR SIMILAR).
UNDERSTANDING OF REST APIS, JSON, AND YAML.
FAMILIARITY WITH MITRE ATT&CK FRAMEWORK
EXPERIENCE IN WORKING IN MULTI-TENANCY ENVIRONMENT; EXPERIENCE IN MULTI-AGENCY OR ENTERPRISE SERVICE PROJECTS.
PREFERRED SKILLS:
EXPERIENCE CREATING AUTOMATIONS WITHIN THE CORTEX XSOAR PLATFORM.
KNOWLEDGE OF SECURITY MONITORING USE CASES AND INCIDENT RESPONSE SUPPORT.
PREFERRED EDUCATION/CERTIFICATIONS:
CISSP, CISA, CISO OR EQUIVALENT ADVANCED SECURITY CERTIFICATION.
ADDITIONAL RELEVANT CERTIFICATIONS (E.G., CEH, OSCP, GPEN).
VENDOR CERTIFICATIONS IN SOAR OR AUTOMATION TECHNOLOGIES.