SIEM SOAR Engineer

Booz Allen Hamilton•McLean, MD

About The Position

SIEM SOAR Engineer Key Role: Partner with clients to validate cloud cybersecurity tools and controls that support mission-critical business objectives. Create technical roadmaps, project plans, requirements, designs, and implementation plans in Office 365, Salesforce, Workday, and other commer cia l SaaS cloud solutions. Plan, coordinate, and perform red team penetration assessments. C ond uct research on emerging technologies and industry trends independently for impact and applicability to client challenges. Work closely with clients, leadership, and vendors in formal and informal environments to gain approvals, overcome obstacles, and reach consensus in the furtherance of the client's mission and the company's cloud security strategy.

Requirements

3+ years of experience configuring high-throughput streaming data pipelines with Micro sof t Sentinel, Log Analytics, and Azure Monitor
3+ years of experience developing analytic rules and workbooks with KQL, automation rules, and configuring data connectors
3+ years of experience working with Azure and Micro sof t 365 cloud environments
Experience with Micro sof t-native log sources, including Defender XDR, Intune, and Entra ID
Experience with scripting in Bash, PowerShell, and Python
Ability to work with REST APIs and develop custom data connectors
Ability to obtain a Secret clearance
HS diploma or GED

Nice To Haves

Experience with the administration of M365, MDE, or Intune
Experience with GraphQL, Power Apps, and Power Automate
Knowledge of ELK stack, Cribl, and Splunk ES
Top Secret clearance
Bachelor's degree
Micro sof t AZ-500, SC-200, AZ-104, and CISSP Certifications

Responsibilities

Partner with clients to validate cloud cybersecurity tools and controls that support mission-critical business objectives.
Create technical roadmaps, project plans, requirements, designs, and implementation plans in Office 365, Salesforce, Workday, and other commer cia l SaaS cloud solutions.
Plan, coordinate, and perform red team penetration assessments.
C ond uct research on emerging technologies and industry trends independently for impact and applicability to client challenges.
Work closely with clients, leadership, and vendors in formal and informal environments to gain approvals, overcome obstacles, and reach consensus in the furtherance of the client's mission and the company's cloud security strategy.