TS/SCI SOAR Engineer: Automation & SIEM Integrations

Nowges; San Antonio, Northern (TX, KY); Hybrid; USD 75,000 - 125,000; Full time

Job summary

Nowges seeks an experienced SOAR Engineer to support the government customer’s SOAR platform and Elastic SIEM integration. The role covers sustainment, monitoring, and content development for the Global SOAR platform hosted on AF Cloud one (NIPRNET/SIPRNET).

The position requires on-site presence at Joint Base San Antonio to support the USAF Defensive Cyber Systems PMO Product Section, collaborating with stakeholders to build automation and playbooks that improve analyst efficiency and reduce

Qualifications

• Experience with SOAR platforms and SIEM integrations.
• Developing, testing, and maintaining automation playbooks in a SOAR environment.
• Ability to troubleshoot connectors/integrations with vendor systems.
• Experience in cloud-hosted apps and government or DoD security ops environments.

Responsibilities

• Support integration of Global SIEM with Global SOAR platform.
• Establish new integrations with USAF systems as directed.
• Identify data sources and establish connectivity using connectors.
• Design and build playbooks to reduce analyst workload.
• Monitor SOAR health and performance; validate dashboards.

Skills

SOAR engineering

XSOAR / Cortex XSOAR

SIEM integration

automation playbooks

team collaboration

Education

Bachelor's degree in CS / Cybersecurity / Info Systems

Tools

XSOAR

Elastic SIEM

Tanium

Microsoft Defender

Job description

Nowges seeks an experienced SOAR Engineer to support the government customer’s SOAR platform and Elastic SIEM integration. The role covers sustainment, monitoring, and content development for the Global SOAR platform hosted on AF Cloud one (NIPRNET/SIPRNET).

The position requires on-site presence at Joint Base San Antonio to support the USAF Defensive Cyber Systems PMO Product Section, collaborating with stakeholders to build automation and playbooks that improve analyst efficiency and reduce