Security Orchestration, Automation & Response

JOB SUMMARY

Under the direction of the Chief Information Security Officer, the Security Orchestration, Automation, and Response (SOAR) Engineer is responsible for the development, implementation, and administration of UConn’s security automation capabilities, including its infrastructure and systems, in support of the University’s Information Security Office. The engineer designs, builds, and maintains automated security workflows, integrations, and response playbooks that improve the efficiency and effectiveness of cybersecurity operations across the University’s academic, research, and administrative environments. Additionally, this role develops and supports technical solutions that strengthen threat detection, incident response, and operational resilience through the integration of security technologies, data sources, and industry best practices.

The SOAR Engineer is responsible for investigating and resolving a diverse range of security operations, automation, and technical issues across multiple platforms, working with a broad range of University stakeholders whose technical skills range from minimal to extensive. The engineer works among a team of skilled information security and IT professionals to address problems within a complex University environment and develop solutions that fit into that environment.

The SOAR Engineer is responsible for processes and procedures to ensure the continuous improvement of monitoring, detection, and mitigation capabilities. The engineer plans, organizes and establishes priorities related to an assignment; works independently with minimal outside support; and handles sensitive information in a confidential manner.

SALARY

• Security Orchestration, Automation & Response Engineer 2 (Information Security Analyst 2 – UCP 6): $84,880 to $115,427
• Security Orchestration, Automation & Response Engineer 3 (Information Security Analyst 3 – UCP 7): $95066 to $129,289

Note: Please indicate the role you are applying for in your cover letter.  All minimum qualifications must be met at the applicable level to be eligible for consideration at that level. Applicable role will be verified by the hiring committee with respect to qualifications and demonstrated experience. Salary will be commensurate with experience within the established range.

BENEFITS INCLUDE

• Defined contribution with employer match or defined benefit program retirement options
• Excellent and affordable healthcare options
• 35-hour work week
• 22 paid vacation days per year, paid sick leave, and 13 paid holidays
• Employee and dependent tuition waivers
• A highly desirable work environment and work-life balance

DUTIES AND RESPONSIBILITIES

Security Orchestration, Automation, and Response Engineer 2

• Administer and use security tools to identify, investigate, analyze, and mitigate threats to the environment.
• Assists with the development and support of UConn’s security infrastructure, including but not limited to SIEM, SOAR, EDR/XDR, logging, identity and access management, forensic capabilities, and others.
• Develops, maintains, and supports automated workflows, integrations, scripts, and playbooks to improve security operations and incident response processes.
• Participates in cybersecurity incident response activities including triage, analysis, containment, eradication, recovery, and post-incident review activities.
• Produces and maintains detailed engineering plans, operating procedures, diagrams, workflows, standards, and documentation related to security operations and automation platforms.
• Proactively analyzes logs, alerts, telemetry, and security events to identify threats, intrusions, suspicious behavior, and/or compromises.
• Assists other information security domain owners and IT teams with operational security activities, investigations, troubleshooting, and implementation efforts as needed.
• Triages and responds to service requests, operational issues, and escalations.
• Maintains awareness of current and emerging threats, vulnerabilities, attack techniques, and industry trends.
• Maintains appropriate documentation and diagrams of infrastructure and security systems.
• Promote security awareness and best practices to improve the overall security posture of the University.
• Participates in on-call rotation, after-hours changes, and security escalations as needed.
• Performs other related duties as assigned.

Security Orchestration, Automation, and Response Engineer 3 (additional responsibilities inclusive of Engineer 2)

• Serves as domain and subject matter expert in one or more inform