SOAR Engineer

MSM Tech Inc.; Illinois; Hybrid; USD 90,000 - 120,000; Full time

Job summary

MSM Tech Inc. is seeking a SOAR engineer with strong security operations, threat detection, and security engineering background to contribute to Threat Defense Solutions.

The role involves automation, AI capabilities, and collaboration with in-house teams to translate customer needs into secure outcomes. The ideal candidate will have experience with SOAR platforms, Python programming, and API integrations, plus knowledge of DoD or government agency environments.

Qualifications

• HS Diploma or GED minimum.
• Experience supporting DoD or government agencies.
• Experience building out security automation capabilities based on analyst requirements.
• Experience with playbook development using SOAR platforms such as Tines, Palo Alto XSOAR, Splunk Phantom, or Swimlane.
• Experience with programming using Python.
• Experience with integrating solutions via APIs and creating custom apps or integrations.

Responsibilities

• Develop Threat Defense Solutions focusing on detection, automation, and AI capabilities.
• Collaborate with in-house teams to translate customer needs into secure, effective solutions.
• Take a critical approach to solution design, identify gaps, and customize solutions balancing security and business needs.

Skills

Security operations

Threat detection

Automation

AI capabilities

Python

APIs integration

CI/CD pipelines

Infrastructure as Code

Zero Trust Architecture

Security engineering

Education

HS Diploma or GED

Tools

Tines

Palo Alto XSOAR

Splunk Phantom

Swimlane

Docker

Kubernetes

Podman

Elastic Stack

Job description

We are seeking a SOAR engineer to display a strong background in security operations, threat detection, and security engineering.

• Responsible for key contributions in developing Threat Defense Solutions, focusing on detection, automation, and development of artificial intelligence (AI) capabilities, which enable the client to achieve measurable growth and maturity.
• Work with in-house teams to identify the right mix of tools, techniques, and procedures to translate customer needs and future goals into a plan that will enable secure and effective solutions.
• Take a critical approach to solution design, identifying gaps, providing alternatives, and customizing solutions to maintain a balance of security and business needs.

Requirements

Required Skills:

• HS Diploma or GED minimum
• Experience supporting DoD or government agencies
• Experience building out security automation capabilities based on analyst requirements
• Experience with playbook development using Security Orchestration and Automated Response (SOAR) platforms such as Tines, Palo Alto XSOAR, Splunk Phantom, or Swimlane
• Experience with programming using Python
• Experience with integrating solutions via APIs and creating custom apps or integrations

Preferred Skills:

• Experience with Linux administration
• Experience with containerization technology such as Docker, Kubernetes, or Podman
• Experience with log management platforms such as the Elastic Stack or Splunk
• Experience supporting Defensive Cyber Operations
• Experience with integrating with AI systems
• Experience with designing and implementing robust, scalable, and efficient CI/CD pipelines
• Experience with Infrastructure as Code (IaC) and Configuration as Code (CaC)
• Experience with application containerization
• Experience with network automation in Python and Ansible
• Knowledge of AI gateway security and Zero Trust Architecture (ZTA) principles