Remote Cybersecurity Principal

Motion Recruitment; Roseville (CA); Remote; USD 129,000 - 134,000; Full time

Benefits offered by this job

Medical Insurance

Dental Benefits

Vision Benefits

Paid Time Off (PTO)

401(k)

Job summary

Motion Recruitment is seeking a Cyber Security Principal on a contract basis to advance SOAR capabilities and incident response across a healthcare-focused enterprise. The role emphasizes designing XSOAR playbooks, automating security processes, and supporting analysts with data-driven insights to strengthen overall security posture.

Fully remote across the United States. You will collaborate with security teams to optimize workflows, document procedures, and deliver tangible metrics that

Qualifications

• 3+ years of cybersecurity, security operations, or incident response experience.
• Hands-on experience with XSOAR.
• Experience with Splunk or similar SIEM.
• Strong Python development skills.
• Knowledge of incident response processes and workflows.
• Experience performing root cause analysis of security incidents.
• Strong data analysis and troubleshooting capabilities.
• Ability to document security processes and playbooks.
• High School Diploma or equivalent.

Responsibilities

• Design, develop, and maintain XSOAR playbooks to automate security operations.
• Identify opportunities for security orchestration across the enterprise.
• Support incident response analysts in using SOAR technologies.
• Develop cyber security analytics from multiple security platforms.
• Investigate incidents and perform root cause analysis.
• Analyze vulnerabilities and recommend remediation.
• Monitor anomalous security events and escalations.
• Create and manage security incidents throughout their lifecycle.
• Examine adversary TTPs to improve detection and response.
• Collaborate to enhance operational processes and security controls.
• Develop reporting and metrics to measure program effectiveness.
• Recommend improvements to enterprise monitoring and defense.

Skills

XSOAR

Splunk

Python

Incident response

Data analysis

Root cause analysis

Security operations

Security processes

Education

Bachelor's degree in CS/Cybersecurity/IT/Engineering

Job description

Job DescriptionA leading healthcare-focused enterprise is seeking a Cyber Security Principal to join its security operations team on a contract basis. This role will play a key part in advancing Security Orchestration, Automation, and Response (SOAR) capabilities while supporting enterprise-wide incident response initiatives.

The ideal candidate will have a strong background in cybersecurity operations, automation, and threat analysis. This position will focus on designing and developing SOAR playbooks, improving response processes, supporting security analysts, and enhancing the organization's overall security posture through automation and data-driven decision making.

This is a fully remote opportunity open to candidates located anywhere within the United States.

Required Skills & Experience

• 3+ years of cybersecurity, security operations, or incident response experience
• Hands-on experience with XSOAR
• Experience working with Splunk or similar SIEM platforms
• Strong Python development skills
• Knowledge of incident response processes and security operations workflows
• Experience performing root cause analysis of security incidents
• Strong data analysis and troubleshooting capabilities
• Ability to develop and document security processes, procedures, and playbooks
• High School Diploma or equivalent

Desired Skills & Experience

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field
• Experience with CrowdStrike
• Experience with Proofpoint
• Experience with Tanium
• Knowledge of Microsoft Azure security technologies
• Digital forensics experience
• Networking and infrastructure security knowledge
• Experience with threat intelligence, vulnerability management, and security analytics

What You Will Be Doing

Daily Responsibilities

• Design, develop, and maintain XSOAR playbooks to automate security operations processes
• Identify new opportunities for security orchestration and automation across the enterprise
• Support incident response analysts in their use of SOAR technologies and workflows
• Develop cyber security analytics using data from multiple security platforms
• Investigate security incidents and perform root cause analysis
• Analyze vulnerabilities and recommend remediation strategies
• Monitor and assess anomalous security events and escalations
• Create and manage security incidents throughout the incident lifecycle
• Examine adversary tactics, techniques, and procedures to improve detection and response capabilities
• Collaborate with security teams to enhance operational processes and security controls
• Develop reporting and metrics to measure security program effectiveness
• Recommend improvements to enterprise security monitoring and defense strategies

Daily Responsibilities Breakdown

• 100% Hands-On Technical Work
• Security Automation & SOAR Development
• Incident Response Support
• Threat Analysis & Security Operations Improvement

The Offer

• Contract Opportunity (22 Weeks)
• Competitive hourly compensation: $94.30 - $97.55/hr
• Fully Remote (U.S.-Based Candidates)

You will receive the following benefits

• Medical Insurance
• Dental Benefits
• Vision Benefits
• Paid Time Off (PTO)
• 401(k)

Applicants must be currently authorized to work in the US on a full-time basis now and in the future.