Haystack
← Back to Jobs
Technology
SS

SIEM/SOAR Engineer (Cloud Sec Spec 3)

Softthink Solutions, Inc.Washington, DC🇺🇸United StatesPosted 1 Sept 2026

Why This Role Stands Out

This role offers a fantastic opportunity to advance your career by building and optimizing a cutting-edge SIEM/SOAR environment within a reputable company, allowing you to develop specialized cloud security skills. If you have a strong background in SIEM/SOAR platforms and enjoy creating robust detection rules and automation workflows, you'll thrive in this position and contribute significantly to enterprise security operations. Apply today to become a key player in safeguarding critical data!

Quick Overview

Seniority
Mid Senior
Work mode
On Site
Location
Washington, DC, United States
Posted
1 week ago
AWSAzure

Job Description

Job Title: SIEM/SOAR Engineer (Cloud Sec Spec 3)


Location: Onsite - Washington DC
Work authorization:

Role Summary

The SIEM/SOAR Engineer builds and configures the Google SecOps SIEM/SOAR environment, ensuring ingestion pipelines, detections, playbooks, and automation workflows are fully operational and optimized for SBA s enterprise security operations.

Roles & Responsibilities

  • Configure ingestion pipelines and validate endtoend log flow.
  • Implement Google curated detections and build custom detection rules.
  • Develop SOAR playbooks for SBA s top incident categories.
  • Integrate threat intelligence sources (Mandiant, VirusTotal).
  • Tune detections to meet falsepositive thresholds.
  • Support UEBA dashboard configuration and risk scoring.
  • Assist with runbook creation, analyst training, and operational transition.

Professional Experience Required

  • 5+ years of experience with SIEM/SOAR platforms (Google SecOps preferred).
  • Experience building detection rules, automation workflows, and parser validation.
  • Experience with cloud telemetry ingestion (Azure, AWS, on-prem).
  • Experience with threat intelligence integration.

Educational Qualification

  • Bachelor s degree in Cybersecurity, IT, or related field.

Certifications

Google SecOps, GIAC, CISSP, or equivalent preferred.

Similar jobs

Browse related jobs

Apply now