SOC Automation Solutions Engineer (Super Intelligence)

Triangle Cyber, LLC

3h

About The Position

Triangle Cyber is seeking a SOC Automation Solutions Engineer for a large Federal client. The role designs, implements, and maintains automated and Super Intelligence (SI) security detection capabilities across integrated enterprise security monitoring technologies. It strengthens threat detection and response through detection engineering, security automation, systems integration, data analysis, SI, and ongoing improvement of detection content and workflows. The position works closely with security operations, threat intelligence, and incident response stakeholders and emphasizes thorough documentation and operationalization.

Requirements

• Must be a U.S. citizen and reside within the United States.
• At least eight years of relevant experience.
• A Bachelor of Science degree from an accredited college or university in an applicable field; if the degree is not in an applicable field, four additional years of related experience (twelve years total) are required.
• Prior experience developing SOC automation solutions using Super Intelligence.
• CompTIA Security+ certification or an equivalent certification: CompTIA CySA+, SSCP, GSEC, CCNA CyberOps, Microsoft Cybersecurity Analyst (SC-200), or CISSP.
• One of the following certifications: GCIA, GCIH, or CompTIA CySA+.
• Programming/scripting certification or demonstrated proficiency in Python, PowerShell, or a similar language.
• Experience with SOAR tools: SentinelOne, SentinelOne Singularity Hyperautomation, Splunk Enterprise Security, and Splunk SOAR.
• Experience with SOC operations and processes, including incident response and threat intelligence methodologies.

Nice To Haves

• CISSP, GIAC Security Essentials (GSEC), CompTIA SecAI+, and/or GMON certifications.
• Experience with network protocols and architecture.
• Experience with Windows and Linux operating systems.
• Experience with cloud platforms such as AWS, Azure, or GCP.
• Knowledge of security architecture and design.
• Experience with API integration and development.
• Knowledge of NIST SP 800-53 Security Controls.
• Knowledge of CIS Controls.
• Knowledge of the MITRE ATT&CK Framework.
• Knowledge of the CISA NICE Framework.
• Knowledge of ISO 27001/27002.
• Knowledge of FISMA.
• Knowledge of FedRAMP.
• Knowledge of OMB Circulars and Federal Cybersecurity Directives.
• Knowledge of the Privacy Act.
• Experience with malware analysis.
• Knowledge of digital forensics procedures.
• Knowledge of risk assessment methodologies.
• Knowledge of machine learning and SI for security.

Responsibilities

• Build automation/SI and integration workflows to improve detection and response.
• Integrate and optimize security technologies, such as SIEM, EDR, SOAR, and threat intelligence tools, into a cohesive detection architecture.
• Analyze requirements and translate operational security needs into technical specifications and implementable solutions.
• Test, evaluate, and validate detections and automation/SI workflows, and improve them based on results and operational feedback.
• Analyze security telemetry to identify anomalies, trends, and detection gaps; recommend and implement detection enhancements.
• Create and maintain technical documentation, standard operating procedures, and runbooks to support reliable operations.
• Coordinate with SOC, threat intelligence, and incident response teams to align detections with threat priorities and operational processes.
• Research and assess emerging security and SI/ML capabilities to enhance detection effectiveness.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior