SOAR Automation Engineer III

Ledgent Technology; Santa Ana (CA); On-site; USD 76,000 - 87,000; Full time

Job summary

Ledgent Technology is seeking a Security Orchestration Automation and Response (SOAR) Capability Lead to advance automation playbooks, administer SOAR, and investigate security alerts. You will join a team of eleven within Enterprise Functions, collaborating with analysts, engineers, and cybersecurity professionals to mature monitoring capabilities. The role includes on-call rotation and cross-team liaison to optimize incident response.

Qualifications

• 5+ years of experience within information security that includes experience within a SOC.
• 2+ years of experience with SOAR technologies.
• Strong understanding of cyber-attacks, ability to assess risk and coordinate effective response.
• Excellent written and oral communication skills.
• Self-motivated with a strong work ethic.

Responsibilities

• Perform SOAR playbook content development, technology integrations and overall tool health and maintenance.
• Conduct investigation of security alerts following established playbooks and scale events of interest to senior team members.
• Implement processes and procedures to support and mature the Security Monitoring service.
• Establish trust and business relationships with internal customers and other relevant stakeholders.
• Participate in an on-call rotation.

Skills

SOC experience

SOAR technologies

Risk assessment

Communication skills

Self-motivation

Tools

SIEM

SOAR

EDR

Job description

Salary: USD55 - USD63 per hour

Pay range: $55 - 63 per hour

As a Security Orchestration Automation and Response (SOAR) Capability Lead, you will assist with automation playbook development, SOAR administration and cybersecurity alert investigation analysis. You will fill an existing role that sits on a team of eleven people in the Enterprise Functions division. Your colleagues will include analysts, engineers, and fellow cybersecurity professionals.

How you’ll help move us forward:

• Perform SOAR playbook content development, technology integrations and overall tool health and maintenance.
• Conduct investigation of security alerts following established playbooks and scale events of interest to senior team members.
• Implement processes and procedures to support and mature the Security Monitoring service.
• Establish trust and business relationships with internal customers and other relevant stakeholders.
• Participate in an on-call rotation.

The experience you bring:

• 5+ years of experience within information security that includes experience within a Security Operations Center (SOC).
• 2+ years of experience with Security Orchestration Automation and Response (SOAR) technologies.
• Strong understanding of cyber-attacks, ability to assess risk and coordinate effective response.
• Excellent written and oral communication skills.
• Self-motivated with a strong work ethic.

What makes you stand out:

• Relevant certifications such as XSOAR Engineer, GSEC, GCIH, GPYC or equivalent experience and skills.
• Deep understanding of SOAR platforms and SOC automation.
• Experience with using AI technology to enhance automation and process efficiencies.
• Strong understanding of several technologies including SIEM, SOAR, EDR and other alerting sources.