SOSi · 4 months ago
Security Engineer – AI & SOAR Integration
SOSi is seeking a Security Engineer – AI & SOAR Integration to join their forward-leaning cyber team in Hawaii, where mission meets innovation. The role involves leading the deployment, tuning, and maintenance of AI-assisted detection and response platforms and SOAR automation pipelines, ensuring they are resilient, effective, and compliant.
ConsultingGovernmentInformation Technology
Responsibilities
Deploy, configure, and maintain AI-enabled monitoring and response platforms to support analyst operations and after-hours coverage
Develop and tune SOAR automation pipelines for triage, containment, escalation, and recovery
Ensure automation logic is explainable, logged, and compliant with DoD and NSOC SOPs
Integrate AI workflows with SIEM, EDR, and NTA telemetry for real-time monitoring and enrichment
Validate AI-assisted detections with analyst feedback, adjusting rules to reduce false positives
Serve as Tier 3 escalation point for automation- or tool-related incidents
Provide forensic data and log enrichment to support containment and response
Collaborate with Detection Engineers to build and validate custom detection rules and playbooks
Maintain current knowledge of emerging AI/automation technologies, threats, and adversary tactics
Participate in tabletop and live security exercises to validate AI & SOAR readiness
Document engineering changes, playbook updates, and lessons learned for continuous improvement
Qualification
Required
Active in scope SECRET clearance or the ability to obtain SECRET eligibility
Bachelor's Degree in Cybersecurity, Computer Science, Information Systems, or related discipline (or equivalent experience/certifications)
5+ years of cybersecurity engineering or SOC/NSOC experience
DoD 8140 Intermediate certification (GFACT or CEH or Cloud+ or CySA+ or PenTest+ or SSCP or Security+ or GSEC)
Hands-on experience with SIEM, EDR, SOAR platforms
Scripting/automation experience (Python, PowerShell, REST APIs)
Strong written and verbal communication skills for reporting, documentation, and escalation
Preferred
Active Top Secret clearance with ability to obtain/maintain TS/SCI
Prior experience working with AI-enabled SOC platforms or AI/ML-assisted detection technologies
Experience designing or managing SOAR workflows (Cortex XSOAR, Splunk SOAR, Phantom, etc.)
Vendor certifications (Elastic Certified Engineer, Palo Alto, Tenable, Splunk, etc.)
Advanced cybersecurity certifications (GCIA, GCTI, CEH, or GCIH)
Company
SOSi
SOSi solves the challenges of the modern mission.
Funding
Current Stage
Late StageRecent News
The Latest Tech News from Techreport
2025-11-01
2025-10-06
2025-08-21
Company data provided by crunchbase