[Hiring] SOC Automation Solutions Engineer @Triangle Cyber, LLC

Role Description

Triangle Cyber is seeking a SOC Automation Solutions Engineer for a large Federal client to design, implement, and maintain automated/Super Intelligence (SI) security detection capabilities across integrated enterprise security monitoring technologies. The SOC Automation Solutions Engineer will strengthen threat detection and response through:

• Detection engineering
• Security automation
• Systems integration
• Data analysis
• Continuous improvement of detection content and workflows

The role requires close collaboration with security operations, threat intelligence, and incident response stakeholders, along with strong documentation and operationalization practices.

Core Roles & Responsibilities

• Detection Engineering & Automation/SI: Build automation/SI and integration workflows to improve detection and response.
• Security platform integration: Integrate and optimize security technologies (e.g., SIEM, EDR, SOAR, threat intelligence) into a cohesive detection architecture.
• Requirements-to-implementation: Perform requirements analysis and translate operational security needs into technical specifications and implementable solutions.
• Testing & validation: Execute testing, evaluation, and validation of detections and automation/SI workflows; drive continuous improvements based on results and operational feedback.
• Security data analysis: Analyze telemetry to identify anomalies, trends, and detection gaps; recommend and implement detection enhancements.
• Documentation & sustainment: Create and maintain technical documentation, SOPs, and runbooks to support reliable operations.
• Cross-functional coordination: Work closely with SOC, threat intelligence, and incident response teams to align detections to threat priorities and operational processes.
• Emerging capability evaluation: Research and assess new security and SI/ML capabilities to enhance detection effectiveness.

Qualifications

• Must be a U.S. citizen and reside within the United States.
• Must have a minimum of eight (8) years of relevant experience.
• Must have a Bachelor of Science degree from an accredited College/University in the applicable field of services. If the individual's degree is not in the applicable field, then four additional years of related experience is required (twelve years).
• Must have prior experience developing SOC automation solutions using Super Intelligence.
• Must have either CompTIA Security+ certification or equivalent (CompTIA CySA+, SSCP, GSEC, CCNA CyberOps, Microsoft Cybersecurity Analyst (SC-200), CISSP).
• Must have one of GCIA, GCIH, or CompTIA CySA+ certifications.
• Must have programming/scripting certification or demonstrated proficiency (e.g., Python, PowerShell, similar).
• Must have experience with SOAR Tools: SentinelOne, SentinelOne Singularity Hyperautomation, Splunk Enterprise Security, Splunk SOAR.
• Must have experience with SOC operations and processes, including Incident Response and Threat Intelligence methodologies.

Desired Experience

• CISSP, GIAC Security Essentials (GSEC), CompTIA SecAI+, and/or GMON certifications.
• Network protocols and architecture.
• Operating systems (Windows/Linux).
• Cloud platforms (AWS/Azure/GCP).
• Security architecture and design.
• API integration and development.
• NIST SP 800-53 Security Controls.
• CIS Controls.
• MITRE ATT&CK Framework.
• CISA NICE Framework.
• ISO 27001/27002.
• FISMA.
• FedRAMP.
• OMB Circulars and Federal Cybersecurity Directives.
• Privacy Act.
• Malware analysis.
• Digital forensics procedures.
• Risk assessment methodologies.
• Machine learning and SI for security.