Note: The job is a remote job and is open to candidates in USA. TalentFish is an employee-owned technology staffing company focused on connecting organizations with technology talent and delivering AI-driven solutions. They are seeking a Security Automation and Response Engineer to advance Security Operations through SOAR playbook development, automation, and AI-driven workflows. The role will support incident response, threat investigation, malware and intrusion analysis, SIEM operations, and SOC efficiency.
Responsibilities
- Develop, implement, and maintain SOAR playbooks to automate repetitive security tasks, including alert triage, threat investigation, and incident response, using tools like SOAR, Python, and API integrations
- Advance Security Operations capabilities through AI-driven initiatives, in collaboration with the Information Security Operations Manager
- Investigate malware, intrusions, unauthorized access, and data infiltration/exfiltration events
- Analyze logs, memory, disk images, and network captures to determine attack scope and impact
- Stay current on cyber threats and industry best practices to continuously enhance SOC capabilities
- Work with SIEM platforms and associated query languages (Yara-L, CQL, SPL, etc.)
- Participate in Purple Team activities
- Participate in on-call rotation and respond to critical security events
Skills
- BS or BA in Computer Science, Engineering, or equivalent education, training, or work experience
- 5+ years of security experience, or equivalent training and education
- Solid knowledge of computing systems, data network communications, and network architecture
- Hands-on experience with SOAR playbook development
- Required scripting or programming skills (Python, PowerShell, Go, etc.)
- Experience in incident response and threat investigation
- Experience in threat detection and understanding of logging systems
- Effective written and verbal communication skills
- This role requires authorization to work in the U.S. without current or future visa sponsorship
- Security certifications (GIAC, CISSP) preferred
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- Retirement savings
- Paid time off
- Remote opportunity
Company Overview