Soar Engineer

ClearFocus Technologies; Denver (CO); On-site; USD 135,000 - 170,000; Full time

Job summary

ClearFocusTechnologies seeks a highly skilled SOAR Engineer to design, develop, and maintain security automation for our SOC. You will work with SOAR platforms, automate workflows, and integrate security tools via APIs.

The ideal candidate brings 8+ years in cybersecurity, strong scripting skills, and experience with incident response. Onsite 100% in Washington, DC with active Top-Secret clearance required.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, or related field.
• 8+ years in cybersecurity, SOC or incident response.
• Hands-on with SOAR platforms (Cortex XSOAR, Splunk SOAR, Swimlane, Tines).
• Strong scripting and REST API skills; good communication.

Responsibilities

• Design, develop, test, and deploy SOAR playbooks and automation workflows.
• Integrate security tools with the SOAR platform using APIs.
• Automate incident response for phishing, malware, and access events.
• Maintain API integrations with third-party security products.
• Collaborate with SOC analysts to identify automation opportunities.
• Monitor and optimize SOAR platform performance and reliability.
• Document workflows and operational procedures.

Skills

SOAR Platforms

Python

PowerShell

REST APIs

SIEM / EDR

Incident Response

Cloud Security

Communication

Education

Bachelor's degree in Cybersecurity / CS / IT

Tools

Cortex XSOAR

Splunk SOAR

Swimlane

Tines

Job description

ClearFocusTechnologies,a HUBZone certified company, is located inLeesburg, VA.We specialize in cybersecurity and support multiple government and commercial clientsfora variety ofmissions.Wevalue our clients, integrity and employees and believe a single person can make a difference!

We are committed to attracting and retaining the best and brightest talent who desire to work with industry leading technology to stay on top of their profession.We provide an excellent benefit package which includesmedical, dental, vision, paid time off,401(k),paid professionaldevelopment reimbursementand more!

We are seeking a SOAR Engineer for an opportunity that is 100% onsite in Washington, DC. All applicants must have an active Top-Secret clearance and SCI/Q eligibility. No exceptions.

Job Summary

We are seeking a highly skilled SOAR Engineer to design, develop, and maintain security automation solutions that enhance our Security Operations Center (SOC). The ideal candidate will have experience with SOAR platforms, security tool integrations, scripting, and incident response processes. This role will focus on automating repetitive security tasks, improving response times, and increasing operational efficiency.

Key Responsibilities

• Design, develop, test, and deploy SOAR playbooks and automation workflows.


• Integrate security tools such as SIEM, EDR, threat intelligence, ticketing, and IAM solutions with the SOAR platform.


• Automate incident response processes for phishing, malware, unauthorized access, and other security events.


• Develop and maintain API integrations with third-party security products.


• Collaborate with SOC analysts, threat hunters, and incident responders to identify automation opportunities.


• Monitor and optimize SOAR platform performance, scalability, and reliability.


• Create technical documentation, workflow diagrams, and operational procedures.


• Troubleshoot automation failures and improve existing playbooks.


• Participate in change management and security engineering initiatives.


• Stay current with emerging cybersecurity threats, technologies, and automation best practices.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).


• 8+ years of experience in cybersecurity, SOC operations, security engineering, or incident response.


• Hands-on experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, Swimlane, or Tines.


• Strong scripting skills in Python, PowerShell, or similar languages.


• Experience with REST APIs and security tool integrations.


• Knowledge of SIEM technologies and security operations workflows.


• Understanding of network security, cloud security, and threat detection concepts.


• Excellent problem-solving and communication skills.

Preferred Qualifications

• Experience with cloud platforms such as Amazon Web Services, Microsoft Azure, or Google Cloud.


• Security certifications such as CISSP, Security+, or CEH.


• Experience with DevSecOps, CI/CD pipelines, containerization, or AI-driven security automation.


• Knowledge of EDR, XDR, IAM, and threat intelligence platforms.

Common Technical Skills

• SOAR Platforms


• Python / PowerShell


• REST APIs


• SIEM (Splunk, Elastic, QRadar)


• Incident Response


• Threat Intelligence


• Security Automation


• Playbook Development


• Cloud Security


• Linux Administration


• Git / CI-CD


• Security Tool Integrations