Hybrid Senior SOAR Engineer

at Warner Bros. Discovery

• Job title: Senior SOAR Engineer
• Job type: Full Time
• Experience level: Senior
• Salary: $105,280 - $195,520 per year
• Degree requirement: No Education Requirement
• Tech skills: AWS, Azure, Cyber Security, Python, SDLC, Terraform
• Location requirements: Hybrid, Atlanta, United States

About the role

• SOAR Engineer supporting cybersecurity operations involving security tool integrations for WBD. Driving SOAR development lifecycle and enhancing CSOC response capabilities.

Responsibilities

• A technical engineer, with an extensive security operations background, who drives the SOAR development lifecycle, in support of the security operations teams.
• Strong understanding of SOAR playbook development and logic.
• Strong understanding of CSOC workflows.
• Write, test, and maintain automation scripts/workflows within SOAR platform.
• Author and maintain documentation for all scripts, integrations, and workflows.
• Design, implement, standardize, and maintain efficient and reusable Python code or other programming language.
• Review, test, debug, and resolve technical issues throughout all stages of Software Development Life Cycle.
• Translate conceptual CSOC\IR requirements into technical data and integration requirements for the SOAR platform.
• Deliver API solutions that streamline, simplify, and improve efficiencies for the CSOC\IR teams as well as other enterprise Business Units.
• Design, test, and implement new playbooks for the cyber security operation center.
• Partner with CSOC/IR leadership to gather SOAR requirements, priorities, and enhancements.
• Partner with CSOC/IR teams to review the development of integrations, workflows, & scripts to ensure anticipated output is achieved.
• Implement technical modifications to integration, script, workflow based on feedback from product consumers.

Requirements

• 5+ years of technical cybersecurity experience in Incident Response, Security Operations, Threat Intelligence, etc.
• Strong understanding of a variety of security tools and technologies (IDS/IPS, EDR, XDR, SIEM, Vuln Mgmt., etc.)
• Experience with scripting such as BASH, PowerShell, and Python.
• Strong RegEx/PCRE experience
• Ability to multi-task and prioritize work effectively.
• A track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively.
• Demonstrated exceptional written and verbal communication skills.
• Excellent interpersonal skills and the ability to work effectively with people in a wide range of levels.
• Experience administering Amazon Web Services (AWS) and/or Microsoft Azure.
• Familiarity with infrastructure-as-code tools, such as Terraform or CloudFormation.
• Experience deploying and correlating threat intelligence and vulnerability management solutions.

Benefits

• health insurance coverage
• an employee wellness program
• life and disability insurance
• a retirement savings plan
• paid holidays and sick time
• vacation