Remote SOC Automation Engineer | Threat Detection & IR

Booz Allen Hamilton; North Dakota; Hybrid; USD 87,000 - 198,000; Full time

Benefits offered by this job

Health benefits

Life insurance

Disability insurance

Tuition assistance

Paid leave

Professional development

Work-life programs

Dependent care

Job summary

Booz Allen Hamilton seeks a Security Operations Center Engineer to design, deploy, and maintain security operations platforms. You will build automated workflows, connect tools via APIs, and implement repeatable responses to threats across Windows and Linux environments.

You will work on incident detection, investigation, and remediation, supporting 24/7 operations and leveraging Tines, ThreatQ, and Andesite to improve threat intelligence and response workflows.

Qualifications

• Experience designing, building, integrating, or maintaining systems that support security operations.
• Experience developing automation using scripting languages, APIs, webhooks, or orchestration platforms.
• Experience integrating security tools, data sources, and operational workflows.
• Knowledge of incident response, threat detection, investigation, and remediation processes.
• Knowledge of Windows or Linux system administration.
• Knowledge of basic IT forensics.
• Ability to troubleshoot complex systems and integrations.
• Ability to support 24/7 operations through a shift or on-call schedule.

Responsibilities

• Design, deploy, integrate, and maintain security operations platforms.
• Develop automated workflows and playbooks to accelerate detection and response.
• Connect security tools and data sources through APIs to enable incident workflows.
• Support 24/7 operations through shifts or on-call coverage.
• Turn analyst requirements into reliable, repeatable capabilities.

Skills

Security operations systems

Automation scripting

APIs and webhooks

Incident response

Windows administration

Linux administration

IT forensics

Troubleshooting complex integrations

Education

HS diploma or GED

Tools

Tines

ThreatQ

Andesite

Elastic

Splunk

Python

PowerShell

JavaScript

Job description

Booz Allen Hamilton seeks a Security Operations Center Engineer to design, deploy, and maintain security operations platforms. You will build automated workflows, connect tools via APIs, and implement repeatable responses to threats across Windows and Linux environments.

You will work on incident detection, investigation, and remediation, supporting 24/7 operations and leveraging Tines, ThreatQ, and Andesite to improve threat intelligence and response workflows.