SOAR Engineer

Evolver Federal is looking for a SOAR Engineer (Security, Orchestration, Automation, Response) to join our growing team in support of a large Security Operations program with our Federal client located in Leesburg, VA.

Lead automation designs, implementation, integration, and maintenance of SOAR playbooks and tools to automate complex cyber activities.

This position is hybrid, with an onsite requirement of 3 days/week in Leesburg, VA.

Responsibilities Include:

• Lead automation designs, implementation, integration, and maintenance of playbooks and tools to automate complex cyber activities.
• Design, develop, and maintain automation scripts and tools to streamline security operations.
• Collaborate with cross-functional teams to understand automation requirements and implement efficient solutions.
• Provide SIEM engineering efforts and provide direct support to SOC operations.

• Serve as the lead for all Security Orchestration, Automation, Response (SOAR) activities within the SOC.
• Work with stakeholders directly to build, design, deliver, re-write, and maintain efficient, reusable, and reliable security automations using SOAR.

• Review API documentation and connect third-party services to the SOAR platform.
• Create detailed technical documentation pertaining to your automations.

Basic Qualifications:

• Must be a United States (US) Citizen with the ability to obtain a Secret Clearance.
• Must be able to pass a comprehensive background check.
• Minimum seven (7) years IT experience
• At least two (2) years of experience in SOAR/SIEM content development
• Bachelor's Degree required. Equivalent years of experience in a related field may be substituted for the degree.
• Must reside within a commutable distance to our customer's location in Leesburg, VA in order to work onsite 3 days/week.
• Hands-on experience using Splunk for both searching/data analysis and for passing data to SOAR.
• Strong programming skills in Python.
• Proficiency with Git.
• Experience working with REST and other third-party API integrations.
• Cloud experience (AWS, Azure, etc.).
• Strong understanding of IT security concepts and practices, as well as Blue Team processes and workflows.

Preferred Qualifications

• 7 years of SOC related experience
• 3+ years of python scripting experience with Splunk or other SIEM
• 2 years of SIEM/SOAR content development
• Six Sigma Black Belt Certification

Evolver Federal is an equal opportunity employer and welcomes all job seekers. It is the policy of Evolver not to discriminate based on race, color, ancestry, religion, gender, age, national origin, gender identity or expression, sexual orientation, genetic factors, pregnancy, physical or mental disability, military/veteran status, or any other factor protected by law.