Remote Cybersecurity Principal

Motion Recruitment; United States; À distance; USD 129 000 - 134 000; Plein temps

Avantages offerts par ce poste

Medical Insurance

Dental Benefits

Vision Benefits

PTO

401(k)

Résumé du poste

Motion Recruitment is partnering with a leading healthcare-focused enterprise to hire a Cyber Security Principal for a contract role, fully remote across the United States. The position focuses on advancing SOAR capabilities and enterprise-wide incident response initiatives.

The role designs and develops SOAR playbooks, enhances response processes, supports security analysts, and drives automation and data-driven decision making to strengthen the organization’s security posture.

Qualifications

• 3+ years in cybersecurity operations or incident response
• Hands-on experience with XSOAR
• Experience with Splunk or similar SIEM
• Strong Python development skills
• Knowledge of incident response processes and security workflows
• Root cause analysis of security incidents
• Ability to document security processes and playbooks
• High School Diploma or equivalent

Responsabilités

• Design, develop, and maintain XSOAR playbooks to automate security operations processes
• Identify opportunities for security orchestration and automation across the enterprise
• Support incident response analysts in using SOAR technologies and workflows
• Develop cyber security analytics from multiple security platforms
• Investigate security incidents and perform root cause analysis
• Analyze vulnerabilities and recommend remediation strategies
• Monitor anomalous security events and escalations
• Create and manage security incidents through their lifecycle
• Examine adversary tactics to improve detection and response
• Collaborate to enhance operational processes and security controls
• Develop reporting and metrics to measure security program effectiveness
• Recommend improvements to security monitoring and defense strategies

Connaissances

XSOAR

Splunk

Python

Incident response

Data analysis

Formation

Bachelor's degree in CS/Cybersecurity/IT

High School Diploma or equivalent

Outils

XSOAR

Splunk

CrowdStrike

Proofpoint

Tanium

Azure Security

Description du poste

Job Description
A leading healthcare-focused enterprise is seeking a Cyber Security Principal to join its security operations team on a contract basis. This role will play a key part in advancing Security Orchestration, Automation, and Response (SOAR) capabilities while supporting enterprise-wide incident response initiatives.
The ideal candidate will have a strong background in cybersecurity operations, automation, and threat analysis. This position will focus on designing and developing SOAR playbooks, improving response processes, supporting security analysts, and enhancing the organization's overall security posture through automation and data-driven decision making.
This is a fully remote opportunity open to candidates located anywhere within the United States.

Required Skills & Experience

• 3+ years of cybersecurity, security operations, or incident response experience
• Hands-on experience with XSOAR
• Experience working with Splunk or similar SIEM platforms
• Strong Python development skills
• Knowledge of incident response processes and security operations workflows
• Experience performing root cause analysis of security incidents
• Strong data analysis and troubleshooting capabilities
• Ability to develop and document security processes, procedures, and playbooks
• High School Diploma or equivalent

Desired Skills & Experience

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field
• Experience with CrowdStrike
• Experience with Proofpoint
• Experience with Tanium
• Knowledge of Microsoft Azure security technologies
• Digital forensics experience
• Networking and infrastructure security knowledge
• Experience with threat intelligence, vulnerability management, and security analytics

What You Will Be Doing

Daily Responsibilities

• Design, develop, and maintain XSOAR playbooks to automate security operations processes
• Identify new opportunities for security orchestration and automation across the enterprise
• Support incident response analysts in their use of SOAR technologies and workflows
• Develop cyber security analytics using data from multiple security platforms
• Investigate security incidents and perform root cause analysis
• Analyze vulnerabilities and recommend remediation strategies
• Monitor and assess anomalous security events and escalations
• Create and manage security incidents throughout the incident lifecycle
• Examine adversary tactics, techniques, and procedures to improve detection and response capabilities
• Collaborate with security teams to enhance operational processes and security controls
• Develop reporting and metrics to measure security program effectiveness
• Recommend improvements to enterprise security monitoring and defense strategies

Daily Responsibilities Breakdown

• 100% Hands-On Technical Work
• Security Automation & SOAR Development
• Incident Response Support
• Threat Analysis & Security Operations Improvement

The Offer

• Contract Opportunity (22 Weeks)
• Competitive hourly compensation: $94.30 - $97.55/hr
• Fully Remote (U.S.-Based Candidates)

You will receive the following benefits

• Medical Insurance
• Dental Benefits
• Vision Benefits
• Paid Time Off (PTO)
• 401(k)

Applicants must be currently authorized to work in the US on a full-time basis now and in the future.