Security; SOAR​/SIEM Engineer

Join to apply for the Security (SOAR/SIEM) Engineer role at Entelligence
.

Security Engineer - Middletown, NJ
Entelligence is seeking an engineer to support our clients. The successful candidate must be able to work in a cross‑functional environment and interact with representatives from Entelligence, the client, and the end‑user.

As an Engineer for Cortex XSOAR, you will assist with log migration and detection strategy for our customers. You will work closely with the technical lead to ensure that all relevant log sources are onboarded and ingested into XSIAM in accordance with industry best practices and customer requirements. You will then work to determine a suitable detection strategy, helping to protect customers from threats by designing and implementing correlation rules.

• Lead security automation technical implementations in a customer environment
• Translate complex business requirements into best practice solutions
• Identify and document operational business processes for automated playbook development
• Prepare capacity planning, deployment, business continuity, and configuration guides
• Communicate effectively in various situations with all levels of an organization from Engineering/Operations to CIO/CISO audiences
• Present technical information to non‑technical personnel
• Train and enable customer teams to be successful with our products
• Develop KPIs, understand critical success factors, and continuously measure performance
• Engage with the account team to allow them to clearly understand the customer business and technical requirements as you learn through active engagement with the client

• Experience with security automation platforms and orchestration tools (SOAR)
• Familiarity with IDS/IPS, SIEM, and endpoint solutions
• Experience managing complex automated security solutions in large environments
• Deep understanding of security threats, internet protocols, cybersecurity tools, and applications
• Project leadership experience; ability to drive organizations and resources to complete required tasks in service of end goals
• Detailed experience installing, configuring, operating, and documenting security solutions to prevent threats
• Experience working in a Security Operations Center (SOC) and documenting operational workflows
• Excellent written and verbal communication skills, with confirmed ability to communicate to senior leaders and technical peers
• Some understanding of Linux or Unix and network troubleshooting analysis
• Preferred experience in Python and/or Java Script
• Preferred experience in cybersecurity incident response
• Previous experience with STIGs, RMF, NIST publications, and/or SCAP
• GCIA, CISSP, CEH, and/or Security+ certifications is a plus

• Competitive base salary
• Medical, dental, vision, and life insurance
• Vacation, sick time, and paid holidays
• Matching 401(k) program

ENTELLIGENCE. ALWAYS READY.
Since 1997, Entelligence has provided mission critical project delivery capacity for uninterrupted growth and long‑term market leadership to the industry’s biggest enterprise IT brands. Our commitment to close working partnerships and a proven approach for sustainable success is why Entelligence is Always Ready to help the world’s technology leaders quickly deliver their most advanced IT solutions to their most important customers.