Remote Cybersecurity Principal

Job Description A leading healthcare-focused enterprise is seeking a Cyber Security Principal to join its security operations team on a contract basis. This role will play a key part in advancing Security Orchestration, Automation, and Response (SOAR) capabilities while supporting enterprise-wide incident response initiatives.
The ideal candidate will have a strong background in cybersecurity operations, automation, and threat analysis. This position will focus on designing and developing SOAR playbooks, improving response processes, supporting security analysts, and enhancing the organization’s overall security posture through automation and data-driven decision making.
This is a fully remote opportunity open to candidates located anywhere within the United States. Required Skills & Experience

• 3+ years of cybersecurity, security operations, or incident response experience
• Hands-on experience with XSOAR
• Experience working with Splunk or similar SIEM platforms
• Strong Python development skills
• Knowledge of incident response processes and security operations workflows
• Experience performing root cause analysis of security incidents
• Strong data analysis and troubleshooting capabilities
• Ability to develop and document security processes, procedures, and playbooks
• High School Diploma or equivalent

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field
• Experience with Crowd Strike
• Experience with Proofpoint
• Experience with Tanium
• Knowledge of Microsoft Azure security technologies
• Digital forensics experience
• Networking and infrastructure security knowledge
  
  Experience with threat intelligence, vulnerability management, and security analytics

• Design, develop, and maintain XSOAR playbooks to automate security operations processes
• Identify new opportunities for security orchestration and automation across the enterprise
• Support incident response analysts in their use of SOAR technologies and workflows
• Develop cyber security analytics using data from multiple security platforms
• Investigate security incidents and perform root cause analysis
• Analyze vulnerabilities and recommend remediation strategies
• Monitor and assess anomalous security events and escalations
• Create and manage security incidents throughout the incident lifecycle
• Examine adversary tactics, techniques, and procedures to improve detection and response capabilities
• Collaborate with security teams to enhance operational processes and security controls
• Develop reporting and metrics to measure security program effectiveness
• Recommend improvements to enterprise security monitoring and defense strategies

• 100% Hands-On Technical Work
• Security Automation & SOAR Development
• Incident Response Support
• Threat Analysis & Security Operations Improvement

• Contract Opportunity (22 Weeks)
• Competitive hourly compensation: $94.30 – $97.55/hr
• Fully Remote (U.S.
  
  -Based Candidates)

• Medical Insurance
• Dental Benefits
• Vision Benefits
• Paid Time Off (PTO)
• 401(k)
  Applicants must be currently authorized to work in the US on a full-time basis now and in the future.