As a Security Orchestration Automation and Response (SOAR) Capability Lead, you will assist with automation playbook development, SOAR administration, and cybersecurity alert investigation analysis. You will fill an existing role on a team of eleven people in the Enterprise Functions division, working alongside analysts, engineers, and cybersecurity professionals.

Responsibilities include:

Perform SOAR playbook content development, technology integrations, and tool health/maintenance Investigate security alerts following playbooks and escalate events of interest Implement processes/procedures to support and mature Security Monitoring service Establish trust and business relationships with internal customers and stakeholders Participate in on-call rotation Experience required: 5+ years in information security, including SOC experience 2+ years with SOAR technologies Strong understanding of cyber-attacks, risk assessment, and response coordination Excellent written/oral communication skills Self-motivated with strong work ethic Preferred qualifications: Relevant certifications (XSOAR Engineer, GSEC, GCIH, GPYC, or equivalent) Deep understanding of SOAR platforms and SOC automation Experience using AI technology to enhance automation and efficiency Strong knowledge of SIEM, SOAR, EDR, and other alerting sources Medical, dental, and vision insurance are available to qualified candidates who meet eligibility requirements.