SOAR Engineer at Kinzo Staffing Maryland

Comunidade Metodista; Baltimore (MD); On-site; USD 110,000 - 140,000; Full time

Job summary

Kinzo Staffing in Maryland seeks a SOAR Automation Developer to join the CYBER D&R Automation team. You will design automation playbooks and work on threat detection with modern SOAR platforms.

Responsibilities include integrating security tools such as Exabeam, Chronicle, CrowdStrike and Splunk ES, testing APIs, and aligning with SOC goals and security initiatives to drive operational efficiency. Strong analytical skills and collaboration with vendors and leadership are required to deliver

Qualifications

• Understanding of Indicators of Compromise and forensics.
• Knowledge of operations security and security compliance.
• Ability to analyze threats using detection tools.

Responsibilities

• Develop automation playbooks using modern SOAR platforms to support Security Operations.
• Design and develop integration with Exabeam, Chronicle, Crowdstrike, Splunk ES via SOAR.
• Test, customize and master APIs for security and IT tools.
• Maintain understanding of SOC goals, SIEM tech, and security initiatives.
• Identify operational improvements to Cyber Services drawing on SOC experience.
• Manage in-scope integration/implementation projects.
• Communicate with vendors, 3rd party providers, leadership, and clients.
• Analyze complex issues to determine client impact and propose solutions.
• Adhere to internal security policies and contribute to process improvements.

Job description

SOAR Engineer job at Kinzo Staffing. Maryland.

As a SOAR Automation Developer, you will be part of the CYBER D&R Automation team. You need possess an understanding of Indicators of Compromise, characterization and forensic engineering of compromised systems, operations security, compliance, mitigation, and analysis through tools that detect advanced threats.

• Develop automation playbooks using modern SOAR Platforms (for example, ServiceNow SOAR, Splunk SOAR, Swimlane) to support Security Operations
• Design and Develop Integration solutions to other security appliances such as Exabeam, Chronicle, Crowdstrike, Splunk ES by leveraging SOAR Platform
• Test, customize and master APIs for off-the-shelf and common security and IT tools
• Maintain a solid understanding of the Cyber Security Operation Center (people, process, SIEM technology), goals, and security initiatives
• Identify and recommend operational improvements to the organization's Cyber Service, drawing on SOC operational experience and industry specific knowledge of risks
• Manage any in scope solution projects (integration/ implementations)
• Manage communications with vendors, 3rd party service providers, organization's leadership, and client personnel when required
• Analyze complex issues to determine client impact and to suggest alternative solutions based on client needs and objectives
• Adhere to internal operational security and other organizational policies
• Contribute to team and organizational improvements in process and infrastructure