Security (SOAR/SIEM) Engineer

Entelligence LLC•Middletown, NJ

28d•Hybrid

About The Position

Entelligence is seeking an Engineer to support our clients. The successful candidate must be able to work in a cross-functional environment and interact with representatives from Entelligence, the client, and the end-user. As an Engineer for Cortex XSOAR, you will be responsible for assisting with the log migration and detection strategy of our customers. You will work closely with the technical lead to ensure that all of the relevant log sources are onboarded and ingested into XSIAM in accordance with industry best practices and customer requirements. You will then work to determine a suitable detection strategy, helping to protect customers from threats, by designing and implementing correlation rules.

Requirements

Experience with security automation platforms and orchestration tools (SOAR)
Familiarity with IDS/IPS, SIEM, and endpoint solutions
Experience managing complex automated security solutions in large environments
Deep understanding of security threats, internet protocols and cybersecurity tools and applications
Project leadership experience; ability to drive organizations and resources to complete required tasks in service of end goals
Detailed experience in the installation, configuration, operation and documentation of security solutions to prevent cybersecurity threats
Experience working in a Security Operations Center (SOC) and documenting operational workflows
Excellent written and verbal communication skills, with confirmed ability to communicate to senior leaders and technical peers
Some understanding of Linux or Unix and network troubleshooting analysis

Nice To Haves

Preferred experience in Python and/or Javascript
Preferred experience in cybersecurity incident response
Previous experience with STIGs, RMF, NIST publications and/or SCAP
GCIA, CISSP, CEH, and/or Security+ certifications is a plus

Responsibilities

Lead security automation technical implementations in a customer environment
Translate complex business requirements into best practice solutions
Identify and document operational business processes for automated playbook development
Prepare capacity planning, deployment, business continuity and configuration guides
Ability to communicate effectively in various situations with all levels of an organization from Engineering/Operations to CIO/CISO audiences
Present technical information to non-technical personnel
Train and enable customer teams to be successful with our products
Develop key performance indicators (KPIs), understand critical success factors, and continuously measure performance
Engage with the account team to allow them to clearly understand the customer business & technical requirements as you learn through active engagement with the client