SOAR Engineer: Cyber Defense & Automation Lead

Booz Allen Hamilton; Colorado Springs (CO); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking a SOAR Engineer to advance secure, reliable operations of enterprise computer systems. You will lead design, development, and implementation of cyber defense capabilities, including SIEM/SOAR integration, detection pipelines, and automated responses.

Expect collaboration with teams to meet mission goals across classified environments. The role requires hands-on experience with security platforms, cloud/on-prem deployments, and a TS clearance, contributing to Booz

Qualifications

• 3+ years of defensive cyber operations or security engineering experience.
• Experience with SIEM platforms and SOAR tools is required.
• Experience architecting detection pipelines and automated responses.
• Hands-on with EDR/NDR or full-packet capture solutions and cloud/on-prem deployment.
• Knowledge of zero trust, DoD/IC frameworks, and compliance standards.
• Top Secret clearance and HS diploma or GED.

Responsibilities

• Lead the design, development, and implementation of enterprise network cyber defense capabilities.
• Provide guidance to technicians and managers, ensuring project completion.
• Apply expertise in security tooling, log analysis, network monitoring, and incident response.

Skills

Defensive cyber ops

Cybersecurity engineering

Security platform architecture

Zero trust knowledge

Education

HS diploma or GED

Tools

Splunk ES

Elastic

QRadar

Sentinel

Chronicle

Swimlane

XSOAR

Phantom

CrowdStrike

Corelight

Trellix

Kubernetes

OpenShift

Job description

Booz Allen Hamilton is seeking a SOAR Engineer to advance secure, reliable operations of enterprise computer systems. You will lead design, development, and implementation of cyber defense capabilities, including SIEM/SOAR integration, detection pipelines, and automated responses.

Expect collaboration with teams to meet mission goals across classified environments. The role requires hands-on experience with security platforms, cloud/on-prem deployments, and a TS clearance, contributing to Booz