SOAR Engineer: Automate SOC Workflows & Playbooks

Stellent IT LLC; Dallas (TX); Presencial; USD 110.000 - 150.000; Jornada completa

Descripción de la vacante

Stellent IT LLC in Dallas, Texas, seeks a skilled SOAR Developer for a 12-month contract to modernize SOC operations and automate incident response. You will design reusable automation, integrate SOAR with security tools, and support DevSecOps workflows.

Ideal candidates bring 2+ years in cybersecurity, hands-on SOAR platform experience (Swimlane, Phantom, XSOAR), strong Python, and SIEM knowledge. This contract offers a dynamic, team-driven environment.

Formación

• 2+ years in cybersecurity in SOC or Network Security.
• Bachelor's degree in Computer Science, Information Systems, Engineering, or related field.
• Experience with SOAR platforms (Swimlane, Phantom, XSOAR).
• Experience with security process mapping and improvement concepts.
• Proficient in Python scripting; familiar with REST APIs & JSON.
• Experience with SIEMs like Splunk, QRadar, or XSIAM; Visual Studio.

Responsabilidades

• Automate SOC incident response processes and analyze alerts via a single stream system.
• Develop and maintain custom applications for SOC workflows.
• Improve SOC processes; create/modify SOPs, playbooks, and work instructions.
• Integrate SOAR with other security tools and APIs for automated workflows.
• Write, test, and maintain automation scripts within SOAR platform.
• Design and maintain Python, JavaScript, and JSON code efficiently.
• Troubleshoot issues across all SDLC stages; coordinate with admins for accounts/permissions.
• Mentor SOC teammates on processes, governance, and frameworks.
• Ensure security operations align with DevSecOps practices.

Conocimientos

Python scripting

REST APIs

JSON

JavaScript

XML

Investigative mindset

Educación

Bachelor's degree in CS/IS/Engineering

Herramientas

Swimlane

Phantom

XSOAR

Splunk/XSIAM/QRadar

Visual Studio

Descripción del empleo

Stellent IT LLC in Dallas, Texas, seeks a skilled SOAR Developer for a 12-month contract to modernize SOC operations and automate incident response. You will design reusable automation, integrate SOAR with security tools, and support DevSecOps workflows.

Ideal candidates bring 2+ years in cybersecurity, hands-on SOAR platform experience (Swimlane, Phantom, XSOAR), strong Python, and SIEM knowledge. This contract offers a dynamic, team-driven environment.