Cyber Automation Engineer

Booz Allen Hamilton•San Antonio, TX

4d•Remote

About The Position

Design, implement, integrate, and maintain systems and tools to automate complex cyber activities. Apply specific functional, working, and general industry knowledge. Develop or contribute to solutions to a variety of problems of moderate scope and complexity. Work independently with some guidance. Review or guide activities of junior employees.

Requirements

3+ years of experience with cybersecurity in network security, infrastructure security, applications or systems security, security operations, SIEM, incident response, or threat intelligence
Experience with major automation applications, including integrating tools, designing, writing playbooks, troubleshooting, training, or supporting technical requirements
Ability to produce new playbooks and automate manual security operation procedures, per the backlog and requirements from security operations teams, as new security tools and controls emerge in the marketplace
Ability to help manage an inventory of integrations that enable broader playbook creation
Ability to work on developing connectors with tools to effectively enable end-to-end automation of security operations procedures
Secret clearance
HS diploma or GED

Nice To Haves

Experience with programming languages, including Python
Experience with log management platforms, including Splunk or ELK Stack
Experience with Cybersecurity tools, including Splunk, Cisco ISE, Forescout, BigFix, Tanium, Zscaler, Palo Alto, McAfee, Carbon Black, CrowdStrike, FireEye, Cloud Security platforms, or ServiceNow
Experience with Linux administration
Experience with networks and network protocols, including TCP, UDP, DNS, HTTP, HTTPS, SSH, and FTP
Automation Tools Certification, including Splunk, Splunk SOAR, Security+, CEH, or CISSP Certification

Responsibilities

Design, implement, integrate, and maintain systems and tools to automate complex cyber activities.
Apply specific functional, working, and general industry knowledge.
Develop or contribute to solutions to a variety of problems of moderate scope and complexity.
Work independently with some guidance.
Review or guide activities of junior employees.
Produce new playbooks and automate manual security operation procedures, per the backlog and requirements from security operations teams, as new security tools and controls emerge in the marketplace.
Help manage an inventory of integrations that enable broader playbook creation.
Develop connectors with tools to effectively enable end-to-end automation of security operations procedures.