Design and develop automation workflows and SOAR playbooks, implement and optimize security orchestration processes, and build and maintain integrations between SOAR platform, SIEM, EDR, Firewalls, and other security tools. Collaborate with SOC, Incident Response, and Engineering teams to support adoption of centralized security solutions across agencies. Provide reporting, dashboards, and performance insights.
Key Highlights
Key Responsibilities
Technical Skills Required
Job Description
Job Title: Security Analyst/ Architect – Consultant (SOAR Engineer) (10794)
Location: Columbia, SC (Fully Remote | Local candidates preferred)
Duration: 12 Months (Extension Possible)
Interview Mode: Virtual (1 Round, possible 2nd onsite)
Position Overview
- Focused on SOAR platform engineering, automation, and orchestration
- Will work closely with SOC, Incident Response, and Engineering teams
- Key contributor to centralized security services adoption across agencies
Key Responsibilities
- Design and develop automation workflows and SOAR playbooks
- Implement and optimize security orchestration processes
- Build and maintain integrations between:
- SOAR platform
- SIEM
- EDR
- Firewalls and other security tools
- Develop custom scripts (Python, Bash, PowerShell) for advanced automation
- Work with REST APIs, JSON, and YAML for integrations
- Create and maintain:
- Runbooks
- Process documentation
- Troubleshooting guides
- Collaborate with:
- SOC teams
- Incident Response teams
- Engineering teams
- Support adoption of centralized security solutions across agencies
- Provide reporting, dashboards, and performance insights
Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.
Required Skills & Experience
- Bachelor’s Degree in IT / Information Security
- OR 8+ years of relevant experience in lieu of degree
- 5+ years of experience with SOAR or automation platforms
- 5+ years supporting large-scale IT environments or deployments
- Strong scripting experience:
- Python
- Bash
- PowerShell
- Hands-on experience with:
- REST APIs
- JSON
- YAML
- Familiarity with MITRE ATT&CK framework
- Experience working in:
- Multi-tenant environments
- Enterprise or multi-agency environments
Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.
Preferred Skills
- Experience with Cortex XSOAR
- Knowledge of:
- Security monitoring use cases
- Incident response processes
- Certifications:
- CISSP / CISA / CISO
- CEH / OSCP / GPEN
- SOAR or automation vendor certifications
- Experience with dashboards and reporting
- Strong communication and stakeholder engagement skills
Similar Jobs
Explore other opportunities that match your interests
Cybersecurity & Identity Protection Engineer
BLACKCLOAK
D&H Distributing
