OVERVIEW

Carter-Lambert Divisions is actively seeking Security Orchestration Automation and Response (SOAR) Engineers to join our Department of Veteran Affairs team in support of the Office Information Security (OIS) Cybersecurity Operations Center (CSOC)

Multiple work locations available, including - Hines, IL; Martinsburg, WV; Washington, DC

1^st Shift Available

Job Duties

•        Automate Security Incident Response processes providing the ability to analyze and resolve alerts from existing security tools leveraging a single stream management system

•        Develop and maintain custom Swimlane applications for IR workflow (e.g. create custom application to automate intelligence gathering)

•        Assist with process development and process improvement for Security Operations to include creation/modification of SOPs, Playbooks, and Work instructions

•        Organization of requirements into user stories that are Independent, Negotiable, Valuable, Estimable, Small and Testable

•        Integrate SOAR platform with other security tools and APIs to execute automated workflows

•        Author, test, and maintain automation scripts/workflows within SOAR platform

•        Design, implement, and maintain efficient and reusable Python code

•        Review, debug, and resolve technical issues throughout all stages of SDLC

•        Coordinate with System Administrators, Engineers, and ISSOs to provision service accounts and/or grant required permissions

•        Measure effectiveness of process improvement and automation efforts via metrics and KPIs

•        Possess cybersecurity SOC experience and knowledge with the ability to clearly identify, capture, articulate, design, implement, and maintain security operations uses cases, including developing integration code to provide interoperability between disparate IT and security solutions and infrastructure components

•        Solid background in cybersecurity technologies, including deploying enterprise platforms, conducting demonstrations, creating product documentation, training security analysts, and sustaining enterprise technology services

•        Must understand security operations, incident response, threat management, and enterprise IT and security engineering

•        Provide support for the analysis, development, and integration of Swimlane SOAR Platform along with providing technical expertise to operational users

•        Work on complex technical problems and provide innovative solutions

•        Develop advanced technological ideas and guide their development into a final product

•        Assist with drafting, updating, and modernizing SOPs and guidelines as needed

•        Potential travel limited to about 5%, if needed

Qualifications

Required Education and Experience:

•        Bachelor's degree in technology-related field - equivalent experience may be considered in lieu of a degree

•        Proficiency in Python scripting Working knowledge of REST APIs, JSON, HTML/CSS, JavaScript, XML a preferred

•        Experience deploying in high availability environments preferred

•        Experience managing and maintaining databases preferred

•        Experience with general networking knowledge to include operation of routers, firewalls, DNS, DHCP, subnetting, VPNs and Web Proxies

•        Swimlane Certified SOAR Administrator (SCSA) a plus

•        Swimlane Certified SOAR Developer (SCSD) a plus

•        Proven experience deploying and supporting Swimlane Experience in security process mapping, security process analysis, security process improvement concepts, models, and best practices

•        Remedy ticketing system experience

•        ServiceNow ticketing experience

Other Experience:

•        Excellent analytical and problem-solving skills

•        Ability to function in multiple capacities and adapt as required

•        Strong verbal and written communication skills

•        Strong time management skills with attention to detail

•        Strong critical thinking skills

•        Strong interpersonal and collaborative skills, with the ability to work in a team environment

•        Ability to communicate effectively to both technical and non-technical audiences

Benefits

Carter-Lambert Divisions attracts and retains talent of the highest caliber by offering opportunities to work in exciting and challenging environments surrounded by bright minds. Our employees are our most prized asset and are rewarded with highly competitive compensation and a top-tier benefits package, including:

• 401(k) with company contribution
• Dental Insurance
• Health Insurance
• Vision Insurance
• Paid Time Off

About Carter-Lambert

Carter-Lambert Divisions offers a mission-focused solutions to clients-facing highly complex IT, digital, cyber security, Logistical, and Construction challenges. Our success is achieved by maintaining an environment of trust where people are encouraged to reach their fullest potential. Every candidate that applies to Carter-Lambert Divisions brings a unique prospective to the team, and because our diverse teams, we consistently meet our goals and exceed client expectations. If you consider yourself to be a highly motivated person with a willingness to learn, we invite you to apply today to join our team!

We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.