Senior Security Automation Engineer (SOAR) - Mid-Atlantic region (Remote)
Core
Designing and building security automation/orchestration workflows to integrate security and IT systems, decomposing manual security processes into reliable automated workflows with error handling and conditional logic.
Role type
Senior Security Automation Engineer (SOAR)
Builds
Automated security response workflows connecting SIEM, EDR/XDR, ticketing, and threat intelligence systems
Domain
Cybersecurity / Security Operations Center (SOC)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security operations (SOC), SOAR/automation platform design, REST APIs, Python scripting, SIEM integration, EDR/XDR integration, ticketing system integration, threat intelligence integration, email security integration, workflow decomposition, error handling, conditional logic
Preferred skills
LLM usage in development/automation, AI assisted coding tools, client requirement scoping, detection engineering (detections-as-code, Sigma), version control, automation-as-code practices
Technologies
Tines, Torq, Cortex XSOAR, ServiceNow, Jira, Python, Git, AWS, Azure, Splunk, Microsoft Sentinel, CrowdStrike
