Senior SOAR Engineer
Chenega Corporation2 years ago
Oakton, VA, USASenior
Base Salary
$160k - $180k/yr
Responsibilities
- Architect and serve as the technical expert for SOAR technologies.
- Design and develop SOAR playbooks, integrations, automation, and workflows.
- Maintain SOAR platform health, performance, scalability, and high availability.
- Translate business and security-operations requirements into technical specifications.
- Establish automation governance, version-control, and deployment practices.
- Mentor engineers through code reviews, technical discussions, and career development.
- Build automated solutions for incident triage, enrichment, containment, remediation, and reporting.
- Develop custom connectors and integrations using APIs, Python scripting, and vendor SDKs.
- Identify repetitive SOC tasks and convert them into automation opportunities.
- Ensure automations satisfy security, compliance, and operational requirements.
- Enhance incident-response workflows with threat intelligence, vulnerability data, and detection signals.
- Troubleshoot automation failures, workflow issues, and data-ingestion problems.
- Support major incident-response activities using SOAR-driven orchestrations.
Requirements
- Bachelor’s degree in information technology, cybersecurity, or a related field.
- At least 8 years of professional cybersecurity experience, including at least 5 years in SOAR engineering or automation.
- At least 3 years of experience working in classified and air-gapped environments.
- At least 2 years of technical leadership experience.
- IAT II or higher-level certification is required.
- DOD Top Secret clearance with the ability to obtain an SCI and CI polygraph.
- Hands-on experience with a major SOAR platform such as Palo Alto XSOAR, Splunk SOAR, IBM SOAR, Swimlane, Tines, or Sentinel Logic Apps.
- Proficiency in Python and experience with REST APIs, webhooks, JSON, YAML, and automation frameworks.
- Knowledge of system architecture, data structures, algorithms, SOC operations, detection engineering, and incident-response processes.
- Experience troubleshooting complex enterprise networks and working with Windows, Linux, and macOS.
- Knowledge of classified and unclassified government network requirements, NIST, DISA STIGs, vulnerability requirements, RMF, ATO lifecycles, and cybersecurity frameworks.
- Understanding of EDR, SIEM, firewalls, threat intelligence platforms, IAM, and cloud security.
- Familiarity with Git, CI/CD pipelines, cloud platforms, cloud automation, PowerShell, and Bash.
- Preferred certifications include PCAP, PCPP, PCCSE, GCIH, GSOC, GMON, GCIA, GCDA, GCFA, or GCTI.
- A platform-specific SOAR certification for XSOAR, Splunk, or Sentinel is preferred.
Benefits
- Professional development opportunities, including on-the-job learning and formal development programs.
- Well-being programs and a supportive culture focused on healthy, flexible, and sustainable work practices.
- Estimated base salary of $160,000 to $180,000 per year.
- The position is located in Oakton, Virginia; no remote or hybrid arrangement is stated.
About Chenega Corporation
Chenega Corporation is an Alaska Native village corporation that provides government services contracting, including IT, cybersecurity, healthcare, and security services, primarily for U.S. defense, intelligence, and federal civilian agencies. Through specialized subsidiaries such as Chenega MIOS, it delivers program staffing, managed services, and mission support across the U.S. and abroad. Founded in 1974 and headquartered in Anchorage, Alaska, it is privately held under Alaska Native Claims Settlement Act ownership.