Security Automation Engineer (SOAR)
Core
Design, develop, and integrate automation solutions across SIEM, EDR, and security platforms to build and scale SOAR capabilities for incident response.
Role type
Security Automation Engineer (SOAR)
Builds
Scalable automation workflows and reusable components for SOC operations
Domain
Cybersecurity / Security Operations
Deliverable
production ML models | product features | infrastructure
Required skills
Python, REST APIs, webhooks, event-driven architectures, automation workflow design, SOC operations, incident response, system integration, scalable automation, maintainable code patterns
Preferred skills
AI and intelligent agents, next-generation automation workflows
Technologies
SIEM, EDR, Python, REST APIs, webhooks
Responsibilities
Design and develop automation workflows for incident response and SOC operations; Identify and eliminate manual processes through scalable automation; Build reusable components and maintainable automation patterns; Develop integrations using REST APIs, webhooks, and event-driven architectures; Write high-quality, maintainable Python for automation and orchestration