Source description
About the role
Security Analyst - Consultant (SOAR Engineer)
Why is this position open: New role supporting statewide security automation via the state SOAR platform across South Carolina’s state agencies (Division of Information Security)
Interview Process: 1 round, Virtual/Online - potential for a 2nd round onsite as needed
Duration of the Contract: 12 months
Possibility for Extension: Yes
Work Location: Fully Remote
Candidate Location: No SC residency required. Open to nationwide candidates.
SCOPE OF THE PROJECT: the position will work as a consulting security
Orchestration, automation, and response engineer within the division of
Information security. This role will focus on playbook development and
Orchestration, workflow automation, and logic optimization within the state
Soar platform. They will also build and maintain integrations between the
State soar platform, siem, edr, firewalls, and other necessary security tools.
Engaging directly with state agencies to promote, support, and improve adoption
Of centralized security services is a key focus. The engagement is expected to be
Needed for 12 months with the possibility of extension.
DAILY DUTIES / RESPONSIBILITIES:
Preference will be given to a candidate who can work onsite over
Hybrid and over full-time remote (on-site as needed).
• provide technical expertise and experience in creating efficient
Automation workflows.
• develop, implement automations and optimize existing automations in
Response to security alerts and incidents.
• build and maintain integrations with the soar platform.
• create custom scripts when required to provide functionality not
Supported out of the box integrations.
• document processes, runbooks, and troubleshooting steps related to the
Soar and integrations.
• proactively coordinate with engineering, soc, and ir support as needed
To meet goals.
• other duties as needed.
PREFERRED SKILLS (RANK IN ORDER OF
IMPORTANCE):
• Experience creating
Automations within the cortex
Xsoar platform.
• knowledge of security
Monitoring use cases and
Incident response support.
• resources local to columbia,
South carolina or surrounding
City in south carolina are
Preferred
REQUIRED EDUCATION/CERTIFICATIONS:
• Bachelor's degree in an
Information technology
Or information security
Related field
• eight years of relevant
Work experience may be
Substituted in lieu of
Education
• five years of experience in
Supporting large it
Environments and/or
System deployments
• 5+ years of experience with
Automation platforms or soar
Solutions.
• strong scripting and
Automation skills (python,
Bash, powershell, or similar).
• understanding of rest apis,
Json, and yaml.
• familiarity with mitre att & ck
Framework
• experience in working in multi-
Tenancy environment;
Experience in multi-agency or
Enterprise service projects.
PREFERRED EDUCATION/CERTIFICATIONS:
• Cissp, cisa, ciso or equivalent
Advanced security
Certification.
• additional relevant
Certifications (e.g., ceh, oscp,
Gpen).
• vendor certifications in
Soar or automation
Technologies
More at System Soft Technologies