Lead SOAR Engineer - Threat Hunting and Countermeasures

$111,200 - $200,200/Yr

Target - Brooklyn Park, MN

Full-time - Mid Level

Brooklyn Park, MN

11-50 employees

General Merchandise Retailers

About the position

The Lead SOAR Engineer - Threat Hunting and Countermeasures at Target is responsible for enhancing the cybersecurity posture of the organization by designing and implementing automation solutions for incident response. This role involves assessing current detection engineering processes, creating and managing automation playbooks, and leveraging expert knowledge in security tools and scripting languages to improve the efficiency of threat triage and remediation within the Cyber Fusion Center.

Responsibilities

• Assess current detection engineering procedures and processes.
• Design automations to accelerate the triage, analysis, containment, and remediation of cybersecurity incidents.
• Create, maintain, and manage a library of automation playbooks for common threats.
• Customize and modify playbooks as the threat landscape changes.
• Utilize expert-level knowledge of security tools and scripting languages to execute on mission objectives.

Requirements

• 4-year degree or equivalent experience.
• 5+ years of experience in cybersecurity, preferably in security engineering, security operations, threat detection, or incident response.
• 2+ years' direct experience with security orchestration and automation tools.
• Solid understanding of SIEM systems and the incident response process.
• 3+ years of experience in scripting with languages such as JavaScript, Python, PowerShell, and various shell scripting.
• Proven background in creating automation tools and automating web-based services.
• Thorough understanding of REST API best practices and usage.
• Excellent analytical and problem-solving abilities.
• Strong understanding of leveraging SIEM for enhanced security monitoring and incident response.
• Ability to demonstrate expert-level analytical expertise and close attention to detail.

Nice-to-haves

• Knowledge in Malware/File Analysis desired.
• Possession of or desire to obtain relevant certifications (e.g. CISSP, CISM, CISA) desired.
• Ability to navigate ambiguity and develop working business relationships.

Benefits

• Comprehensive health benefits including medical, vision, dental, and life insurance.
• 401(k) plan.
• Employee discount program.
• Short-term and long-term disability insurance.
• Paid sick leave.
• Paid national holidays.
• Paid vacation.