Cybersecurity Engineer (SOAR) [JOB ID 2024049]

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Phoenix Cyber, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Cybersecurity Engineer (SOAR) at Phoenix Cyber will play a pivotal role in enhancing our security operations through the implementation and optimization of Security Orchestration, Automation, and Response (SOAR) solutions. This position involves designing, configuring, and maintaining systems that reduce the incident response time, increasing the efficiency of security operations. The Cybersecurity Engineer will collaborate closely with various teams to develop and refine incident response workflows, analyze security events, and ensure that our security posture remains robust against evolving threats.

Job Responsibilities

• Design and implement SOAR solutions to automate and orchestrate security incident response processes.
• Develop and maintain playbooks for automated workflows, enhancing efficiency and reducing response times to security incidents.
• Collaborate with incident response teams to analyze threats and develop appropriate countermeasures.
• Monitor and analyze security alerts to identify potential threats and incidents, relaying critical information for further investigation.
• Conduct regular evaluations of the security infrastructure to identify vulnerabilities and recommend improvements.
• Coordinate with other engineering teams to integrate SOAR capabilities into existing security tools and platforms.
• Provide training and support to staff on SOAR technologies and processes.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• 5+ years of experience in cybersecurity roles, with a focus on security operations.
• Strong familiarity with SOAR tools and technologies, such as Splunk Phantom, Demisto, or similar.
• In-depth knowledge of security principles, protocols, and best practices.
• Experience with scripting languages (Python, PowerShell, etc.) to automate security processes.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Relevant cybersecurity certifications (CISSP, CEH, etc.) are preferred.

Technologies & Tools

The Cybersecurity Engineer will work with a range of technologies, including but not limited to SIEM (Security Information and Event Management) solutions, SOAR platforms, firewalls, IDS/IPS systems, and endpoint detection and response (EDR) tools. Familiarity with scripting and automation tools such as Python and PowerShell is essential for building custom workflows and enhancing incident response capabilities.

Ideal Candidates

Ideal candidates for the Cybersecurity Engineer (SOAR) position will possess strong analytical skills, a detail-oriented mindset, and a proactive approach to problem-solving. They should exhibit excellent communication capabilities to effectively collaborate with diverse teams and convey complex security concepts clearly. The ability to remain composed in high-pressure situations and a genuine passion for staying updated on the latest cybersecurity threats and technologies are essential qualities that will ensure their success in this role.