Cyber security Principle

Motion Recruitment Partners, LLC; United States; Remote; USD 96,000 - 165,000; Part time

Job summary

Motion Recruitment is seeking a Cyber Security Principal for a fully remote 22-week contract with a healthcare-focused organization. You will develop and maintain Cortex XSOAR playbooks, automate security tasks with Python, and partner with incident responders to improve threat detection and response across the enterprise.

Ideal candidates have hands-on SOAR experience, strong scripting skills, and a passion for process improvement.

Qualifications

• Hands-on experience developing Cortex XSOAR playbooks and automations.
• Strong Python development and scripting skills.
• Experience supporting security incident response activities.
• Data analysis and cybersecurity investigation experience.
• Experience with Splunk or comparable SIEM platforms.
• Strong understanding of cybersecurity operations, threat detection, and response processes.

Responsibilities

• Design, develop, and maintain Cortex XSOAR playbooks and security automations.
• Support incident response teams throughout the full security incident lifecycle.
• Define, document, and implement new SOAR use cases and automation requirements.
• Analyze security events and create actionable response workflows.
• Perform root cause analysis for security incidents.
• Develop security analytics and threat intelligence capabilities using SIEM data.
• Investigate, document, and escalate anomalous security activity.
• Conduct vulnerability assessments and recommend remediation strategies.
• Improve security monitoring, reporting, and operational processes; collaborate with security teams.

Skills

Cortex XSOAR

Python

Incident response

Data analysis

SIEM (Splunk)

Cybersecurity operations

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related

High School Diploma

Tools

Splunk

Job description

This fully remote contract opportunity is with a large healthcare-focused organization seeking a Cyber Security Principal to support and advance enterprise Security Operations through security automation, incident response, and Security Orchestration, Automation, and Response (SOAR) initiatives. The role is centered on developing and maintaining Cortex XSOAR playbooks, leveraging Python for automation, and partnering with security teams to improve the efficiency and effectiveness of cybersecurity operations across the organization. This is a 22-week contract position available anywhere within the United States during standard business hours.

This opportunity is ideal for a seasoned security professional who enjoys solving operational security challenges through automation and orchestration. You’ll work closely with incident responders and security analysts, helping to streamline investigations, reduce manual effort, and strengthen the organization’s threat detection and response capabilities. Candidates with hands-on SOAR experience, strong scripting skills, and a passion for process improvement will find meaningful impact in this role.

Contract Duration: 22 Weeks

Required Skills & Experience

• Hands-on experience developing and supporting Cortex XSOAR playbooks and automations
• Strong Python development and scripting skills
• Experience supporting security incident response activities
• Data analysis and cybersecurity investigation experience
• Experience with Splunk or comparable Security Information and Event Management (SIEM) platforms
• Strong understanding of cybersecurity operations, threat detection, and response processes
• High School Diploma required

Desired Skills & Experience

• Experience with CrowdStrike
• Experience with Proofpoint
• Experience with Tanium
• Knowledge of Microsoft Azure
• Digital forensics experience
• Networking and network security expertise
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related discipline

What You Will Be Doing

Daily Responsibilities

• Design, develop, and maintain Cortex XSOAR playbooks and security automations
• Support incident response teams throughout the full security incident lifecycle
• Define, document, and implement new SOAR use cases and automation requirements
• Analyze security events and create actionable response workflows
• Perform root cause analysis for security incidents
• Develop security analytics and threat intelligence capabilities using SIEM data
• Investigate, document, and escalation anomalous security activity
• Conduct vulnerability assessments and recommend remediation strategies
• Improve security monitoring, reporting, and operational processes
• Collaborate with security teams to strengthen threat detection and response capabilities
• Hands-on responsibilities: Not provided
• Management duties: Not provided
• Team collaboration: Not provided

Compensation

• Fully Remote (United States)
• Standard business hours: 8:00 AM – 5:00 PM
• 22-week contract engagement