Ingeniero de XSOAR de Mid Cortex

VOLTICAN INC; Polska; Hybrid; PLN 430,000 - 547,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Competitive salary

Health insurance

Paid time off

Vision insurance

Flexible schedule

Free food & snacks

Home office stipend

Signing bonus

Job summary

VOLTICAN INC is seeking a Cortex XSOAR Engineer to deploy and maintain the SOAR platform within a federal cloud environment. You will translate client requirements into scalable SOAR designs and provide ongoing operations in a 24x7 federal security operation.

The role requires a minimum bachelor’s degree in Cyber, Computer Science or related field, 5+ years of relevant experience, 3+ years in SOAR engineering, and DoD 8570–level certifications.

Qualifications

• Minimum 5 years of relevant working experience in cyber/security.
• 3+ years of SOAR engineering/administration experience.
• 2+ years of management of SOAR within a Federal environment.
• Understanding of cloud-based and hybrid cloud environments.
• Hands-on troubleshooting and strong written communication skills.
• Knowledge of security frameworks (MITRE ATT&CK, OWASP, NIST).
• DoD 8570 certifications or equivalent.
• Ability to translate client requirements into technical SOAR designs.

Responsibilities

• Assist with configuration, deployment, and maintenance of SOAR technologies in a federal cloud.
• Translate client requirements into technical design/implementation.
• Configure SOAR per DISA STIG and CIS Benchmark requirements.
• Develop dashboards and reports related to SOAR.
• Respond to tickets and document troubleshooting steps.
• Mentor mid-level engineers and assist in incident investigations.

Skills

SOAR experience

SOAR engineering

Federal environment

Linux

Scripting: PowerShell/JS/Python

Strong communication

MITRE ATT&CK/NIST

DoD 8570 knowledge

Education

Bachelor’s degree in Cyber/CS or related

Tools

Azure Cloud

PowerShell

Linux

Job description

Benefits:

• 401(k)
• 401(k) matching
• Competitive salary
• Health insurance
• Paid time off
• Vision insurance
• Flexible schedule
• Free food & snacks
• Home office stipend
• Signing bonus

Role: Cortex XSOAR Engineer

Location: Remote

Work Authorization: US Citizen

Security Clearance: Able to get US “Public Trust” clearance

Required skills/Level of Experience:

As a SOAR Security Engineer, you will be responsible for assisting with the deployment, and maintenance of the Security Orchestration Automation & Response (SOAR) solution within a 24x7x365 federal security operation. The SOAR Engineer will analyze our client’s business requirements / systems /networks and translate those specifications into a SOAR design that provides an efficient and effective SOAR solution within a federal cloud environment.

• Minimum Bachelor’s degree in Cyber, Computer Science, or related field + 5 Years relevant working experience.
• 3+ years of SOAR Engineering / administration experience.
• 2+ years of management of SOAR within a Federal environment.
• Understanding of enterprise environments, specifically cloud-based and hybrid cloud environments. Knowledge of security frameworks including MITRE ATT&CK, OWASP, & NIST.
• Hands-on troubleshooting, analysis, and technical expertise to resolve incidents and/or service requests.
• Strong written communication skills and the ability to articulate technical security analysis to a non-technical audience.
• Understanding of possible attack activities such as network reconnaissance probing/ scanning, DDOS, malicious code activity, etc.
• Able to troubleshoot and be a problem solver with analytical proficiency in Linux.
• Strong scripting skills (JS\Python\PowerShell).
• Attention to details, fast learner and excellent communication skills. Be able to communicate technical information in a simplified, easy to understand manner.
• Cybersecurity knowledge and experience – advantage.
• Provide Technical Support to top-tier customers.
• Provide tailored troubleshooting, configuration guidance, and best practices.
• Manage support cases to ensure issues are recorded, tracked, and resolved with timely follow-ups with thorough documentation of all the troubleshooting steps in the ticketing system.
• Conduct multi-vendor troubleshooting on complex customer engagements and build positive customer experience by working closely with Account, Sales, and Marketing teams.
• Utilize fault isolation and root cause analysis skills to provide post-sales technical support, configuration, troubleshooting, and standard methodologies to customers.
• DoD Approved 8570 certification REQUIRED such as: CompTIA Security+ Certification, CEH, CFR, CCNA Cyber Ops, CCNA-Security, CYSA+**, GCIA, GCIH, GICSP.

Additional Position Description

Specific job duties include:

• Assist with Configuration, Deployment, and Maintenance of SOAR technologies within a federal cloud environment.
• Aid in the translation of client requirements into technical design / implementation.
• Configuration of SOAR in accordance with DISA STIG and CIS Benchmark requirements.
• Recommend system and process improvements to continually enhance security operations.
• Assist security incident responders during system investigations.
• Development of Dashboards and Reports as they relate to SOAR.
• Responding to tickets related to SOAR configuration changes and troubleshooting.
• Solid understanding of Azure Cloud Scripting: Good PowerShell scripting skills.
• Solid understanding of networking concepts and troubleshooting skills.
• Good knowledge of security concepts, IAM, VPN, and NextGen firewalls.
• Troubleshooting: ability to troubleshoot problems solo and deliver solutions within a reasonable timeframe.
• Be able to look at complicated systems to find flaws or room for improvement.
• Job Duty 1 with 60% of time – 60% SOAR Configuration & Management
• Job Duty 2 with 10% of time – Assist in Incident Investigation
• Job Duty 3 with 15% of time – Dashboard Development & Reporting
• Job Duty 4 with 10% of time - Ticket Response
• Job Duty 5 with 5% of time – Mentoring Mid Engineers

Nice to Have Skills:

• Knowledge of Federal Security Standards such as NIST and DoD.
• Understanding and experience with FedRAMP Cloud Security Requirements.

This is a remote position.