Remote SOAR Architect: Cybersecurity Automation & IR

Motion Recruitment; Roseville (CA); Remote; USD 129,000 - 134,000; Full time

Benefits offered by this job

Medical Insurance

Dental Benefits

Vision Benefits

Paid Time Off (PTO)

401(k)

Job summary

Motion Recruitment is seeking a Cyber Security Principal on a contract basis to advance SOAR capabilities and incident response across a healthcare-focused enterprise. The role emphasizes designing XSOAR playbooks, automating security processes, and supporting analysts with data-driven insights to strengthen overall security posture.

Fully remote across the United States. You will collaborate with security teams to optimize workflows, document procedures, and deliver tangible metrics that

Qualifications

• 3+ years of cybersecurity, security operations, or incident response experience.
• Hands-on experience with XSOAR.
• Experience with Splunk or similar SIEM.
• Strong Python development skills.
• Knowledge of incident response processes and workflows.
• Experience performing root cause analysis of security incidents.
• Strong data analysis and troubleshooting capabilities.
• Ability to document security processes and playbooks.
• High School Diploma or equivalent.

Responsibilities

• Design, develop, and maintain XSOAR playbooks to automate security operations.
• Identify opportunities for security orchestration across the enterprise.
• Support incident response analysts in using SOAR technologies.
• Develop cyber security analytics from multiple security platforms.
• Investigate incidents and perform root cause analysis.
• Analyze vulnerabilities and recommend remediation.
• Monitor anomalous security events and escalations.
• Create and manage security incidents throughout their lifecycle.
• Examine adversary TTPs to improve detection and response.
• Collaborate to enhance operational processes and security controls.
• Develop reporting and metrics to measure program effectiveness.
• Recommend improvements to enterprise monitoring and defense.

Skills

XSOAR

Splunk

Python

Incident response

Data analysis

Root cause analysis

Security operations

Security processes

Education

Bachelor's degree in CS/Cybersecurity/IT/Engineering

Job description

Motion Recruitment is seeking a Cyber Security Principal on a contract basis to advance SOAR capabilities and incident response across a healthcare-focused enterprise. The role emphasizes designing XSOAR playbooks, automating security processes, and supporting analysts with data-driven insights to strengthen overall security posture.

Fully remote across the United States. You will collaborate with security teams to optimize workflows, document procedures, and deliver tangible metrics that