SOAR Automation Engineer for Modern SOC Operations

CTC; United States; On-site; USD 90,000 - 130,000; Full time

Job summary

CTC in Texas is seeking an experienced SOAR developer to join its Security Operations Center team. The candidate should be process-driven, efficient, and focused on eliminating repetitive tasks while modernizing SOC cybersecurity operations within a DevSecOps model from design through production support.

Primary responsibilities include automating incident response, developing and maintaining SOC workflows, integrating the SOAR platform with security tools via APIs, drafting SOPs and playbooks,

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Engineering or related field.
• 2+ years in Cybersecurity with SOC/Network Security focus.
• Experience with SOAR platforms (e.g., Swimlane, Phantom, XSOAR).
• Experience in security process mapping, analysis and improvement concepts.

Responsibilities

• Automate SOC security incident response processes and analyze/resolve alerts from security tools using a single stream management approach.
• Develop and maintain custom SOC workflows and automation scripts.
• Create/modify SOPs, playbooks, and work instructions to improve SOC processes.
• Integrate SOAR with other security tools via APIs to enable automated workflows.
• Author, test, and maintain automation scripts within the SOAR platform.
• Review and debug issues across the SDLC and coordinate with admins/engineers for permissions.
• Mentor and train SOC team members on processes, governance, and frameworks.

Skills

Security analytics

Python scripting

SOAR platforms

Security process mapping

SOAR playbooks

DevSecOps

Incident response

Education

Bachelor's degree in Computer Science/Information Systems/Engineering

Tools

Splunk

XSIAM

QRadar

Visual Studio

Job description

CTC in Texas is seeking an experienced SOAR developer to join its Security Operations Center team. The candidate should be process-driven, efficient, and focused on eliminating repetitive tasks while modernizing SOC cybersecurity operations within a DevSecOps model from design through production support.

Primary responsibilities include automating incident response, developing and maintaining SOC workflows, integrating the SOAR platform with security tools via APIs, drafting SOPs and playbooks,