SOC Automation Solutions Engineer – Super Intelligence

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop automation and integration workflows to enhance detection and response capabilities.

• Integrate and refine SIEM, EDR, SOAR, and threat intelligence technologies into a unified detection framework.

• Conduct requirements analysis to transform operational security needs into technical specifications and actionable solutions.

• Implement testing, evaluation, and validation of detection mechanisms and automation workflows.

• Propel continuous improvements through analysis of testing outcomes and operational insights.

• Examine security telemetry to uncover anomalies, trends, and potential detection deficiencies.

• Propose and apply enhancements to detection methodologies.

• Generate and sustain technical documentation, SOPs, and runbooks.

• Collaborate with SOC, threat intelligence, and incident response teams.

• Investigate and evaluate emerging security and SI/ML capabilities.

⛳️ Requirements

• Must be a U.S. citizen residing within the United States.

• Requires a minimum of eight (8) years of pertinent experience.

• Must hold a Bachelor of Science degree from an accredited College/University in a relevant field; if the degree is not in the applicable area, four additional years of related experience is necessary (totaling twelve years).

• Previous experience in developing SOC automation solutions utilizing Super Intelligence is essential.

• Must possess either CompTIA Security+ certification or an equivalent (such as CompTIA CySA+, SSCP, GSEC, CCNA CyberOps, Microsoft Cybersecurity Analyst (SC-200), CISSP).

• Must have one of the following certifications: GCIA, GCIH, or CompTIA CySA+.

• Certification or demonstrable proficiency in programming/scripting (e.g., Python, PowerShell, or similar) is required.

• Experience with SOAR tools like SentinelOne, SentinelOne Singularity Hyperautomation, Splunk Enterprise Security, and Splunk SOAR is necessary.

• Familiarity with SOC operations and processes, including Incident Response and Threat Intelligence methodologies, is required.

• Desired credentials include CISSP, GIAC Security Essentials (GSEC), CompTIA SecAI+, and/or GMON certifications.

• Desired knowledge of network protocols and architecture.

• Desired experience with operating systems (Windows/Linux).

• Desired familiarity with cloud platforms (AWS/Azure/GCP).

• Desired understanding of security architecture and design.

• Desired skills in API integration and development.

• Desired knowledge of NIST SP 800-53 Security Controls.

• Desired understanding of CIS Controls.

• Desired familiarity with the MITRE ATT&CK Framework.

• Desired knowledge of the CISA NICE Framework.

• Desired understanding of ISO 27001/27002.

• Desired familiarity with FISMA.

• Desired understanding of FedRAMP.

• Desired knowledge of OMB Circulars and Federal Cybersecurity Directives.

• Desired understanding of the Privacy Act.

• Desired skills in malware analysis.

• Desired knowledge of digital forensics procedures.

• Desired familiarity with risk assessment methodologies.

• Desired experience with machine learning and SI for security.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance.

• Retirement savings plan with company match.

• Opportunities for professional development and training.

• Flexible work schedule and remote work options.

• Generous paid time off policy.