CBO - Automation Engineer

cFocus Software seeks an Automation Engineer to join our program supporting the Congressional Budget Office (CBO). This position is remote. This position requires a Public Trust clearance.Qualifications:Active Public Trust clearanceB.S. Computer Science, Information Technology, or a related field5+ years of experience in cybersecurity engineering, automation, or SOAR developmentHands-on experience with Microsoft Sentinel and Azure Logic AppsExperience integrating Microsoft Defender XDR (Endpoint, Identity, Cloud)Strong scripting skills (Python, PowerShell, or similar)Experience with API integrations and automation frameworksKnowledge of incident response workflows and SOC operationsUnderstanding of MITRE ATT&CK and detection engineeringExperience with cloud environments (Azure, AWS)Preferred certifications include but are not limited toGCIA, GCIH, CISSP, CEH, or equivalent cybersecurity certifications Microsoft Sentinel or Microsoft security platform certifications Relevant cloud security certifications (e.g., AWS security) Privacy certifications (e.g., CIPP/US, CIPM) where applicable Duties:Design, develop, and maintain SOAR playbooks using Microsoft Sentinel (Logic Apps)Automate incident response workflows (phishing, malware containment, credential compromise, endpoint isolation)Integrate Sentinel with Microsoft Defender XDR and other security tools (identity, endpoint, network, cloud)Develop custom automation workflows and enrichment pipelinesEnsure automation aligns with Sentinel data model and schema normalization requirementsMaintain audit logging, chain-of-custody, and compliance controls within automated workflowsSupport automation for alert triage, ticketing, and escalation processesPerform continuous improvement of playbooks based on incident trends and threat intelligenceProvide quarterly tabletop exercises and playbook validationDevelop reporting on automation effectiveness (MTTD, MTTR improvements)Collaborate with SOC analysts and engineers to operationalize automation use cases