SOAR Automation Engineer III

A client with Kforce is seeking a SOAR Automation Engineer III to join their team in Newport Beach, CA. Summary: As a Security Orchestration Automation and Response (SOAR) Capability Lead, you will assist with automation playbook development, SOAR administration and cybersecurity alert investigation analysis. You will fill an existing role that sits on a team of eleven people in the Enterprise Functions division. Your colleagues will include analysts, engineers, and fellow cybersecurity professionals. Responsibilities:

• Perform SOAR playbook content development, technology integrations and overall tool health and maintenance
• Conduct investigation of security alerts following established playbooks and escalate events of interest to senior team members
• Implement processes and procedures to support and mature the Security Monitoring service
• Establish trust and business relationships with internal customers and other relevant stakeholders
• Participate in an on-call rotation
• 5+ years of experience within information security that includes experience within a Security Operations Center (SOC)
• 2+ years of experience with Security Orchestration Automation and Response (SOAR) technologies
• Strong understanding of cyber-attacks, ability to assess risk and coordinate effective response
• Excellent written and oral communication skills
• Self-motivated with a strong work ethic

• Relevant certifications such as XSOAR Engineer, GSEC, GCIH, GPYC or equivalent experience and skills
• Experience with using AI technology to enhance automation and process efficiencies
• Deep understanding of SOAR platforms and SOC automation
• Strong understanding of several technologies including SIEM, SOAR, EDR and other alerting sources