Soar Engineer

ClearFocus Technologies; Washington (District of Columbia); On-site; USD 120,000 - 165,000; Full time

Job summary

ClearFocusTechnologies in Washington, DC seeks a highly skilled SOAR Engineer for a 100% onsite role. An active Top-Secret clearance and SCI/Q eligibility are required.

You will design, develop, test, and maintain automation workflows to improve SOC operations and incident response. The ideal candidate has hands-on SOAR experience, strong scripting skills, and a track record of integrating security tools via REST APIs.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).
• 8+ years of experience in cybersecurity, SOC operations, security engineering, or incident response.
• Hands-on experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, Swimlane, or Tines.
• Strong scripting skills in Python, PowerShell, or similar languages.
• Experience with REST APIs and security tool integrations.
• Knowledge of SIEM technologies and security operations workflows.
• Understanding of network security, cloud security, and threat detection concepts.
• Excellent problem-solving and communication skills.

Responsibilities

• Design, develop, test, and deploy SOAR playbooks and automation workflows.
• Integrate security tools such as SIEM, EDR, threat intelligence, ticketing, and IAM solutions with the SOAR platform.
• Automate incident response processes for phishing, malware, unauthorized access, and other security events.
• Develop and maintain API integrations with third-party security products.
• Collaborate with SOC analysts, threat hunters, and incident responders to identify automation opportunities.
• Monitor and optimize SOAR platform performance, scalability, and reliability.
• Create technical documentation, workflow diagrams, and operational procedures.
• Troubleshoot automation failures and improve existing playbooks.
• Participate in change management and security engineering initiatives.
• Stay current with emerging cybersecurity threats, technologies, and automation best practices.

Skills

SOAR platforms

Python scripting

REST APIs

SIEM technologies

Incident response

Communication skills

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

Cortex XSOAR

Splunk SOAR

Swimlane

Tines

Job description

ClearFocusTechnologies,a HUBZone certified company, is located inLeesburg, VA.We specialize in cybersecurity and support multiple government and commercial clientsfora variety ofmissions.Wevalue our clients, integrity and employees and believe a single person can make a difference!

We are committed to attracting and retaining the best and brightest talent who desire to work with industry leading technology to stay on top of their profession.

We provide an excellent benefit package which includesmedical, dental, vision, paid time off,401(k),paid professionaldevelopment reimbursementand more!

We are seeking a SOAR Engineer for an opportunity that is 100% onsite in Washington, DC. All applicants must have an active Top-Secret clearance and SCI/Q eligibility. No exceptions.

Job Summary

We are seeking a highly skilled SOAR Engineer to design, develop, and maintain security automation solutions that enhance our Security Operations Center (SOC). The ideal candidate will have experience with SOAR platforms, security tool integrations, scripting, and incident response processes. This role will focus on automating repetitive security tasks, improving response times, and increasing operational efficiency.

Key Responsibilities

• Design, develop, test, and deploy SOAR playbooks and automation workflows.
• Integrate security tools such as SIEM, EDR, threat intelligence, ticketing, and IAM solutions with the SOAR platform.
• Automate incident response processes for phishing, malware, unauthorized access, and other security events.
• Develop and maintain API integrations with third-party security products.
• Collaborate with SOC analysts, threat hunters, and incident responders to identify automation opportunities.
• Monitor and optimize SOAR platform performance, scalability, and reliability.
• Create technical documentation, workflow diagrams, and operational procedures.
• Troubleshoot automation failures and improve existing playbooks.
• Participate in change management and security engineering initiatives.
• Stay current with emerging cybersecurity threats, technologies, and automation best practices.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).
• 8+ years of experience in cybersecurity, SOC operations, security engineering, or incident response.
• Hands-on experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, Swimlane, or Tines.
• Strong scripting skills in Python, PowerShell, or similar languages.
• Experience with REST APIs and security tool integrations.
• Knowledge of SIEM technologies and security operations workflows.
• Understanding of network security, cloud security, and threat detection concepts.
• Excellent problem-solving and communication skills.

Preferred Qualifications

• Experience with cloud platforms such as Amazon Web Services, Microsoft Azure, or Google Cloud.
• Security certifications such as CISSP, Security+, or CEH.
• Experience with DevSecOps, CI/CD pipelines, containerization, or AI-driven security automation.
• Knowledge of EDR, XDR, IAM, and threat intelligence platforms.

Common Technical Skills

• SOAR Platforms
• Python / PowerShell
• REST APIs
• SIEM (Splunk, Elastic, QRadar)
• Incident Response
• Threat Intelligence
• Security Automation
• Playbook Development
• Cloud Security
• Linux Administration
• Git / CI-CD
• Security Tool Integrations