Automation / SOAR Engineer – Senior

MKS2 Technologies

Washington, DC

JOB DETAILS
SALARY
$150,000–$160,000 Per Year
SKILLS
Application Programming Interface (API), Automation, Background Investigation, Bash Scripting, Business Growth, CISSP - Certified Information Systems Security Professional, Case Management, Cloud Computing, CompTIA Security+, Computer Science, Computer Security, Cross-Functional, Customer Escalations, Customer Support/Service, Diversity, Documentation, Endpoint Security, Enterprise Protection, Genetics, Git, Government, Home Automation, Incident Response, Information Technology & Information Systems, Instructional Design, Internet Security, JSON, MKS Toolkit, Microsoft Product Family, Multiplatform/Cross-Platform, Operational Improvement, Operational Strategy, Operational Support, Operations Processes, Performance Analysis, Performance Metrics, Performance Tuning/Optimization, Phishing, Python Programming/Scripting Language, REST (Representational State Transfer), Scripting (Scripting Languages), Security Information and Event Management (SIEM), Security Infrastructure, ServiceNow, Small Business, Software Engineering, Source Code/Configuration Management (SCM), Splunk, Standard Operating Procedures (SOP), Technical Support, Test Plan/Schedule, U.S. National Institute of Standards and Technology (NIST), Windows PowerShell
LOCATION
Washington, DC
POSTED
17 days ago

MKS2 Technologies, LLC, an award-winning high growth small business, creates innovative and customer-centric technology solutions in the areas of Cyber Security, Instructional Design and Training, Software Engineering and IT Support Services to improve the security and well-being of our clients. Our commitment to excellence and our "Mission First" orientation has resulted in steady growth and an expanding client base across government agencies. We have employees nationwide and for the past three consecutive years were named one of the fastest growing Veteran-owned companies in the nation. Please take a moment to browse through our website and learn more about what it means to serve with MKS2.


 

 

Automation / SOAR Engineer – Senior

Location: National Capital Region (Washington, DC) – Hybrid/Onsite
Clearance: Must be able to pass background check (US work authorization required)

Salary: $150,000-$160,000


Position Overview

We are seeking a Senior Automation / SOAR Engineer to support enterprise cybersecurity operations by designing, implementing, and optimizing security automation and orchestration capabilities. This role is focused on improving incident response speed, consistency, and operational efficiency through the development of automated workflows, integrations, and playbooks across security platforms.


Key Responsibilities

  • Design, develop, test, and maintain SOAR playbooks and automated security workflows
  • Integrate SOAR and SIEM platforms with:
    • Ticketing systems (ServiceNow, etc.)
    • Endpoint security tools
    • Identity and access systems
    • Vulnerability management platforms
    • Threat intelligence feeds
  • Automate incident response activities including:
    • Alert triage
    • Data enrichment
    • Case routing and escalation
    • Documentation and reporting
  • Develop automation scripts and integrations using Python, PowerShell, Bash, REST APIs, and similar technologies
  • Collaborate with SOC analysts, incident responders, and stakeholders to identify automation opportunities
  • Optimize workflows to reduce false positives and manual workload
  • Maintain documentation, SOPs, implementation plans, and training materials
  • Track and report automation performance, effectiveness, and operational improvements

Required Qualifications

  • 5–8+ years of experience in:
    • Cybersecurity engineering
    • SOC operations or automation
    • SOAR/SIEM implementation
  • 3+ years of hands-on experience building:
    • Security automation workflows
    • Playbooks and orchestration capabilities
  • Experience integrating SOAR/SIEM with enterprise security tools and systems
  • Experience supporting automation in:
    • Incident response
    • Alert triage and enrichment
    • Case management

Technical Skills

  • Strong scripting and automation experience:
    • Python, PowerShell, Bash
    • REST APIs, JSON, webhooks
    • Git or version control
  • Experience with security tools such as:
    • Splunk, Microsoft Sentinel, Elastic
    • CrowdStrike, Microsoft Defender (MDE)
    • Tenable, Rapid7
    • ServiceNow, Tanium
  • Experience building automation for:
    • Phishing response
    • Endpoint alert enrichment
    • Vulnerability workflows
    • Incident routing and escalation

Education

  • Bachelor's degree in Cybersecurity, IT, Computer Science, Engineering, or related field (or equivalent experience)

Certifications (Preferred)

  • SOAR / SIEM / Security certifications such as:
    • Cortex XSOAR, Splunk SOAR, Swimlane
    • Microsoft Sentinel
    • CISSP, CASP+, CySA+, Security+
    • Cloud security certifications

Additional Qualifications

  • Knowledge of:
    • MITRE ATT&CK framework
    • NIST 800-61 incident response lifecycle
    • SOC operational processes
  • Ability to document workflows and train SOC teams
  • Strong analytical and problem-solving skills

Nice to Have

  • Experience in federal or regulated environments
  • Familiarity with enterprise-scale cybersecurity operations
  • Experience optimizing SOC performance metrics

Ideal Candidate Profile

  • Hands-on builder (not just admin) of automation/playbooks
  • Strong integration/API background
  • Experienced in operational SOC environments
  • Comfortable working cross-functionally with engineering and operations

 


 

Diversity creates a healthier atmosphere: MKS2 Technologies is proud to be an Equal Employment Opportunity / Affirmative Action employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law.

About the Company

M

MKS2 Technologies