Triangle Cyber, LLC - SOC Automation Solutions Engineer (Super Intelligence)
Requirements
• Must be a U.S. citizen and reside within the United States • Must have a minimum of eight (8) years of relevant experience. • Must have a Bachelor of Science degree from an accredited College/University in the applicable field of services. If the indiviual's degree is not in the applicable field, then four additional years of related experience is required (twelve years). • Must have prior experience developing SOC automation solutions using Super Intelligence • Must have either CompTIA Security+ certification or equivalent (CompTIA CySA+, SSCP, GSEC, CCNA CyberOps, Microsoft Cybersecurity Analyst (SC-200), CISSP) • Must have one of GCIA, GCIH, or CompTIA CySA+ certifications • Must have programming/scripting certification or demonstrated proficiency (e.g., Python, PowerShell, similar) • Must have experience with SOAR Tools: SentinelOne, SentinelOne Singularity Hyperautomation, Splunk Enterprise Security, Splunk SOAR • Must have experience with SOC operations and processes, including Incident Response and Threat Intelligence methodologies. • CISSP, GIAC Security Essentials (GSEC), CompTIA SecAI+, and/or GMON certifications • Network protocols and architecture • Operating systems (Windows/Linux) • Cloud platforms (AWS/Azure/GCP) • Security architecture and design • API integration and development • NIST SP 800-53 Security Controls • MITRE ATT&CK Framework • CISA NICE Framework • ISO 27001/27002 • OMB Circulars and Federal Cybersecurity Directives • Malware analysis • Digital forensics procedures • Risk assessment methodologies • Machine learning and SI for security
Responsibilities
• Detection Engineering & Automation/SI: Build automation/SI and integration workflows to improve detection and response. • Security platform integration: Integrate and optimize security technologies (e.g., SIEM, EDR, SOAR, threat intelligence) into a cohesive detection architecture. • Requirements-to-implementation: Perform requirements analysis and translate operational security needs into technical specifications and implementable solutions. • Testing & validation: Execute testing, evaluation, and validation of detections and automation/SI workflows; drive continuous improvements based on results and operational feedback. • Security data analysis: Analyze telemetry to identify anomalies, trends, and detection gaps; recommend and implement detection enhancements. • Documentation & sustainment: Create and maintain technical documentation, SOPs, and runbooks to support reliable operations. • Cross-functional coordination: Work closely with SOC, threat intelligence, and incident response teams to align detections to threat priorities and operational processes. • Emerging capability evaluation: Research and assess new security and SI/ML capabilities to enhance detection effectiveness.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT