What are the responsibilities and job description for the Security Architect SOAR / Security Automation Consultant - 26-04702 position at Compu-Vision Consulting, Inc.?
Job Title: Security Architect SOAR / Security Automation Consultant
Location: Remote (Preference for candidates local to Columbia, SC or surrounding areas) Duration: 12 Months
Job Description:
We are seeking an experienced Security Automation and SOAR Engineer Consultant to support enterprise security operations within a large multi-agency environment. This role focuses on designing, developing, and optimizing security orchestration, automation, and response capabilities across enterprise security platforms.
The ideal candidate will have strong hands-on experience in security automation, integration engineering, and incident response support, with the ability to collaborate directly with security operations and engineering teams.
Key Responsibilities:
- Design, develop, and optimize security automation workflows and playbooks
- Build and maintain integrations between SOAR platforms and enterprise security tools (SIEM, EDR, firewalls, etc.)
- Develop custom scripts to extend automation capabilities (Python, PowerShell, Bash, etc.)
- Improve and optimize existing incident response automation logic
- Document runbooks, processes, and troubleshooting guides for SOAR operations
- Collaborate with SOC, Incident Response, and engineering teams to support security operations
- Support dashboarding, reporting, and visibility into security automation performance
- Engage with agency stakeholders to promote adoption of centralized security services
- Provide ongoing support for multi-agency enterprise security environments
Required Skills & Experience:
- 5 years of experience with SOAR or security automation platforms
- Strong experience in enterprise IT/security environments (large-scale deployments)
- Hands-on experience with automation platforms (especially Cortex XSOAR preferred)
- Strong scripting skills: Python, PowerShell, Bash, or similar
- Deep understanding of REST APIs, JSON, and YAML
- Experience supporting security monitoring and incident response workflows
- Familiarity with MITRE ATT&CK framework
- Experience working in multi-tenant or multi-agency environments
Education / Certifications:
- Bachelor s degree in IT, Cybersecurity, or related field (or equivalent experience)
- 5 years of relevant experience may substitute for education requirement
- Preferred certifications:
- CISSP, CISA, or equivalent
- CEH, OSCP, GPEN (or similar)
- Vendor certifications in SOAR/security automation tools