SOAR Engineer

MSM Technology; Scott Air Force Base (IL); On-site; USD 110,000 - 170,000; Full time

Job summary

MSM Technology is seeking a SOAR engineer at Scott Air Force Base, IL, to strengthen security operations and automation capabilities.

You will develop Threat Defense Solutions, automate detections, and tailor playbooks for DoD workflows using leading SOAR platforms, APIs, and AI-enabled tooling.

Qualifications

• Requires SECRET clearance and DoD experience.
• HS Diploma or GED minimum.
• DOD 8570/8140 certified (IAT Level II).
• Experience supporting DoD or government agencies.
• Experience building security automation and playbooks for SOAR.
• Experience with Python and API integrations.
• Familiar with SOAR tools like Tines, XSOAR, Splunk Phantom, or Swimlane.

Responsibilities

• Develop Threat Defense Solutions with focus on detection, automation, and AI capabilities.
• Work with in-house teams to translate customer needs into secure, effective solutions.
• Critically assess designs, identify gaps, and balance security with business requirements.

Skills

SECRET Clearance

DOD 8570/8140 Certified

Python

SOAR platforms

APIs integration

Security automation

Linux administration

CI/CD pipelines

IaC/CaC

Education

HS Diploma or GED

Tools

Tines

Palo Alto XSOAR

Splunk Phantom

Swimlane

Job description

Description

We are seeking a SOAR engineer to display a strong background in security operations, threat detection, and security engineering.

• Responsible for key contributions in developing Threat Defense Solutions, focusing on detection, automation, and development of artificial intelligence (AI) capabilities, which enable the client to achieve measurable growth and maturity.
• Work with in-house teams to identify the right mix of tools, techniques, and procedures to translate customer needs and future goals into a plan that will enable secure and effective solutions.
• Take a critical approach to solution design, identifying gaps, providing alternatives, and customizing solutions to maintain a balance of security and business needs.

Requirements

Required Skills

• SECRET Clearance
• HS Diploma or GED minimum
• DOD 8570/8140 certified (IAT Level II, e.g. CompTIA Security )
• Experience supporting DoD or government agencies
• Experience building out security automation capabilities based on analyst requirements
• Experience with playbook development using Security Orchestration and Automated Response (SOAR) platforms such as Tines, Palo Alto XSOAR, Splunk Phantom, or Swimlane
• Experience with programming using Python
• Experience with integrating solutions via APIs and creating custom apps or integrations

Preferred Skills

• Experience with Linux administration
• Experience with containerization technology such as Docker, Kubernetes, or Podman
• Experience with log management platforms such as the Elastic Stack or Splunk
• Experience supporting Defensive Cyber Operations
• Experience with integrating with AI systems
• Experience with designing and implementing robust, scalable, and efficient CI/CD pipelines
• Experience with Infrastructure as Code (IaC) and Configuration as Code (CaC)
• Experience with application containerization
• Experience with network automation in Python and Ansible
• Knowledge of AI gateway security and Zero Trust Architecture (ZTA) principles