Cyber security principal (Remote)

About the role

$85 - $100

This is an opportunity to join a large healthcare-focused organization as a **Cyber Security Principal** supporting enterprise Security Operations. This fully remote, contract role is open to candidates located anywhere in the United States and focuses heavily on security automation, incident response, and Security Orchestration, Automation, and Response (SOAR) initiatives. The position is ideal for someone with strong **Cortex XSOAR** , **Python** , and **security operations** experience who enjoys building automation that improves the speed and effectiveness of cyber defense teams.

What makes this opportunity especially compelling is the chance to work at scale, partnering directly with incident responders and security analysts to streamline investigations and enhance detection and response capabilities. You'll have the opportunity to design meaningful automation, reduce manual effort across the security lifecycle, and make a measurable impact on security operations while working remotely during standard business hours.

**Required Skills & Experience**

+ Experience developing and supporting Cortex XSOAR playbooks and automations

+ Strong Python development skills

+ Incident Response experience

+ Security investigations and data analysis experience

+ Experience with Splunk or comparable Security Information and Event Management (SIEM) platforms

+ Knowledge of cybersecurity operations, threat detection, and threat response

+ High School Diploma required

+ Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field preferred

**Desired Skills & Experience**

+ CrowdStrike

+ Proofpoint

+ Tanium

+ Microsoft Azure

+ Digital Forensics

+ Networking and Network Security

**What You Will Be Doing**

+ Design, develop, and maintain Cortex XSOAR playbooks and security automations

+ Support Incident Response teams throughout the security incident lifecycle

+ Define, document, and implement new SOAR use cases and automation requirements

+ Analyze security events and create actionable response workflows

+ Perform root cause analysis on security incidents

+ Develop security analytics and threat intelligence capabilities using SIEM data

+ Investigate anomalous security activity and document findings

+ Conduct vulnerability assessments and recommend remediation actions

+ Enhance security monitoring, reporting, and operational processes

+ Collaborate with cross-functional security teams to strengthen detection and response capabilities

**Tech Breakdown**

+ Cortex XSOAR

+ Python

+ Splunk and SIEM Technologies

+ Security Operations and Incident Response

+ Microsoft Azure

+ CrowdStrike, Proofpoint, and Tanium

**Daily Responsibilities**

+ Hands-on security automation, playbook development, and incident response support

+ Security investigation, threat analysis, and root cause analysis

+ Collaboration with security operations, engineering, and response teams to improve detection and remediation processes

Motion Recruitment Partners (MRP) is an Equal Opportunity Employer. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under MRP’s Employment Accommodation policy. Applicants need to make their needs known in advance.

Posting text as published by Kelly Services.

The evidence behind this listing

Workplace

Remote Matched in posting text

Seniority

staff+ From the job title

Employment type

Not established

Location as listed

Remote, MA

Pay and work authorization

Stated pay

Not stated

Visa sponsorship

Not stated

Security clearance

Not established

Citizenship

Not established