Senior SOAR Engineer: SIEM Automation & Playbooks

Global Enterprise Services, Llc; San Antonio (TX); On-site; USD 75,000 - 125,000; Full time

Job summary

Global Enterprise Services, Llc in San Antonio, TX, seeks an experienced SOAR Engineer to support the government customer’s SOAR platform and its integration with Elastic SIEM. The role covers sustainment, monitoring, and content development for the XSOAR platform and its connections to SIEM, hosted on AF Cloud One.

The position requires on-site presence at Joint Base San Antonio and an active TS/SCI clearance.

Qualifications

• Experience with SOAR and SIEM integrations.
• Developing and maintaining automation playbooks.
• Knowledge of Tanium, Defender, Patriot, or similar security platforms.
• Ability to build connectors between SOAR and third-party systems.

Responsibilities

• Support SOAR-SIEM integration and triage alerts.
• Create integrations with USAF systems as directed.
• Identify data sources and establish connectors.
• Design playbooks with content developers to reduce workload.
• Monitor cluster health and performance; troubleshoot issues.
• Validate dashboards for accuracy and availability.
• Incorporate analyst feedback to improve playbooks and workflows.

Skills

SOAR platforms

XSOAR integration

SIEM integration

Automation playbooks

Education

Bachelor's degree

Tools

XSOAR

Elastic SIEM

Tanium

Defender

Patriot

Job description

Global Enterprise Services, Llc in San Antonio, TX, seeks an experienced SOAR Engineer to support the government customer’s SOAR platform and its integration with Elastic SIEM. The role covers sustainment, monitoring, and content development for the XSOAR platform and its connections to SIEM, hosted on AF Cloud One.

The position requires on-site presence at Joint Base San Antonio and an active TS/SCI clearance.