Note: The job is a remote job and is open to candidates in USA. TalentFish is seeking an Information Security Engineer specializing in Security Automation and Response (SOAR) to enhance their client's security operations capabilities. The role involves designing and automating security workflows, developing SOAR playbooks, and working with security teams to improve incident response and threat detection processes.
Responsibilities
- Design, develop, and maintain SOAR playbooks to automate security workflows, including:
- Alert triage
- Threat investigation
- Incident response processes
- Security enrichment activities
- Build automation solutions using:
- Python scripting
- APIs
- Security tool integrations
- Develop and improve security detections through:
- SIEM engineering
- Log analysis
- Query development
- Threat investigation
- Support Security Operations functions, including:
- Incident response
- Security alert analysis
- Threat hunting activities
- SOC process improvements
- Create automation that improves analyst efficiency and increases security visibility
- Partner with security teams to advance automation initiatives, including AI-driven security operations capabilities
Skills
- Hands-on experience building SOAR playbooks from scratch
- Experience automating security processes using SOAR platforms
- Strong Python scripting experience in a cybersecurity environment
- Experience with API integrations and security tool automation
- Strong SIEM experience, including: Creating detections, Writing queries, Investigating security events, Improving log visibility
- Experience with security query languages such as: SPL, YARA-L, CQL, Similar SIEM query languages
- Understanding of: Incident response processes, Threat detection, SOC operations, Security investigations
- Experience supporting AI-driven security operations initiatives
- Experience working in enterprise security environments
- Experience partnering with managed security providers
- Healthcare experience is a plus but not required
Company Overview