Security Automation (SOAR) Engineer
On-siteReston, Virginia, United States
Job Summary
Build security orchestration and automated response workflows using low-code interfaces and pro-code logic. Integrate REST APIs, manage webhooks, and design event-driven systems to streamline incident triage and playbook execution. Leverage frontier LLMs to enhance coding efficiency and accelerate automation development. Requires active TS/SCI clearance, CompTIA Security+ and Cloud+ certifications, and eight years of relevant experience. Based in Chantilly, Virginia, this role supports the Federal Intelligence Community's complex technical challenges through advanced software and systems engineering.
Required Qualifications
- Active TS/SCI Clearance with CI Polygraph
- Bachelor's degree
- 8 years of experience related to specific functional area
- Active certifications for both IAT Level II (e.g. CompTIA Security+) and Cyber Security Service Provider (CSSP) Infrastructure Support (e.g. CompTIA Cloud+) by program onboarding date
- Proven experience building security orchestration and automated response workflows
- Strong grasp of both low-code interface design and pro-code logic handling
- Deep hands-on experience with REST API integration, webhook management, and event-driven systems
- Understanding of core security incidents, triage procedures, and playbook design patterns
Desired Qualifications
- Familiarity with AI coding tools and LLMs (ChatGPT, Grok, Claude, Claude Code, Codex)
- Extensive experience with SOAR Playbook Automation
- Multiple scripting and development languages
- Deep understanding of incident response playbook design
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.