Engineering

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Castillians

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2006

Castillians is a company whose publicly available text is inaccessible without JavaScript; the provided content only shows a message asking the user to enable JavaScript. No information about the company's product, services, industry, or target customers can be determined from this text alone.

📋 Description

• Design, develop, test, and maintain SOAR playbooks to automate security incident detection, investigation, and response. • Integrate the SOAR platform with ITSM solutions, SIEM platforms, security tools, and enterprise applications using APIs and connectors. • Develop scripts and automation workflows using supported scripting languages (e.g., Python, PowerShell, Bash). • Implement and orchestrate automated response actions, including: Firewall rule updates and IP blocking, Active Directory (AD) user account disablement, Endpoint isolation and quarantine, Packet capture (PCAP) extraction, Memory dump acquisition for forensic analysis. • Develop API integrations with internal and third-party security solutions. • Collaborate with SOC analysts and incident responders to automate repetitive security operations and improve incident handling processes. • Troubleshoot and optimize automation workflows to ensure reliability, efficiency, and accuracy. • Document playbooks, integration procedures, automation workflows, and operational runbooks. • Ensure automation activities comply with organizational security policies and governance requirements. • Participate in continuous improvement initiatives to expand automation coverage and enhance SOC maturity.

🎯 Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field. • Proven experience implementing and managing SOAR platforms. • Strong expertise in developing automation playbooks and security workflows. • Hands-on experience with REST APIs, scripting (Python, PowerShell, Bash), and system integrations. • Experience integrating SOAR with ITSM platforms and security tools. • Knowledge of SOC operations and incident response processes. • Experience automating actions such as firewall blocking, Active Directory account disablement, endpoint quarantine, PCAP extraction, and memory dump collection. • Strong analytical, troubleshooting, and communication skills.

🏖️ Benefits

• Clear scope with no ambiguity over deliverables. • Opportunity for repeat engagements based on performance.