Job Requirements
Washington, DC
Top Secret Polygraph Unspecified
Career Level not specified
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
Job Title: ISSE (SOAR Engineer)
Location: Washington, DC
Clearance: Top Secret required, will need to process for a Q clearance
Education/Experience: A relevant bachelor's degree or equivalent and 14 years of relevant experience. With a relevant master's degree, 12 years of relevant experience is acceptable. With a PhD, 10 years of relevant experience is required.
Job Description:
• Design and implement SOAR playbooks for incident response and security operations
• Integrate SIEM, EDR, and other security tools into SOAR platforms (e.g., Splunk SOAR, Swimlane)
• Automate repetitive tasks such as alert triage, enrichment, and ticket creation
• Support incident response teams by improving response speed and consistency
• Develop and maintain APIs, scripts, and integrations (Python preferred)
• Fine-tune playbooks based on threat intelligence and operational feedback
• Document workflows, processes, and automation logic
• Experience integrating SIEM tools (Splunk, ELK, etc.)
• Strong scripting skills (Python preferred)
• Familiarity with incident response processes and SOC operations
• Understanding of MITRE ATT&CK framework
Location: Washington, DC
Clearance: Top Secret required, will need to process for a Q clearance
Education/Experience: A relevant bachelor's degree or equivalent and 14 years of relevant experience. With a relevant master's degree, 12 years of relevant experience is acceptable. With a PhD, 10 years of relevant experience is required.
Job Description:
• Design and implement SOAR playbooks for incident response and security operations
• Integrate SIEM, EDR, and other security tools into SOAR platforms (e.g., Splunk SOAR, Swimlane)
• Automate repetitive tasks such as alert triage, enrichment, and ticket creation
• Support incident response teams by improving response speed and consistency
• Develop and maintain APIs, scripts, and integrations (Python preferred)
• Fine-tune playbooks based on threat intelligence and operational feedback
• Document workflows, processes, and automation logic
• Experience integrating SIEM tools (Splunk, ELK, etc.)
• Strong scripting skills (Python preferred)
• Familiarity with incident response processes and SOC operations
• Understanding of MITRE ATT&CK framework
group id: 10290999
