Security Orchestration, Automation, and Response (SOAR) Engineer – REMOTE (W2 ONLY)

Job Summary

Chandra Technologies, Inc. is seeking a Security Orchestration, Automation, and Response (SOAR) Engineer to work remotely on a W2 contract. This consulting role supports the Division of Information Security, focusing on playbook development, workflow automation, and integration maintenance for a state‑wide SOAR platform.

Key Responsibilities

• Design, develop, and maintain security playbooks and orchestration workflows within the state SOAR platform.
• Automate repetitive security processes to improve incident response efficiency.
• Optimize logic and rule sets to reduce false positives and accelerate threat remediation.
• Build and sustain integrations with external security tools, ticketing systems, and threat intelligence feeds.
• Collaborate with cross‑functional security teams to align automation strategies with organizational policies.
• Provide technical guidance and mentorship to junior engineers and analysts.
• Document solutions, standard operating procedures, and best practices.

Required Qualifications

• U.S. based candidate; no residency restriction for South Carolina.
• Proven experience as a SOAR engineer or in a similar security automation role.
• Strong knowledge of security orchestration platforms (e.g., Splunk SOAR, Palo Alto Cortex XSOAR, IBM Resilient).
• Hands‑on experience with scripting languages such as Python, PowerShell, or Bash.
• Familiarity with APIs, webhooks, and integration patterns for security tools.
• Understanding of incident response lifecycle, threat hunting, and vulnerability management.
• Excellent problem‑solving, communication, and documentation skills.

Preferred Skills

• Certifications such as CISSP, GCIH, or vendor‑specific SOAR credentials.
• Experience with cloud environments (AWS, Azure, GCP) and container orchestration.
• Knowledge of SIEM, EDR, and threat intelligence platforms.

Compensation & Benefits

Annual salary: $96,174.62 (W2). Fully remote work with flexible hours and opportunity to work on high‑impact security projects for a state agency.

Frequently Asked Questions

Is this position fully remote?

Yes, the role is 100% remote and open to candidates nationwide across the United States.

What type of employment contract is offered?

The position is hired on a W2 basis, providing standard employee benefits and tax handling.

What experience is required for the SOAR Engineer role?

Applicants should have proven experience with security orchestration platforms, scripting for automation, and building integrations with security tools.