Design and operate SOAR playbooks and AI workflows for triage and response.
Translate detection logic and AI outputs into actionable, low-noise alerts; tune thresholds.
Build and maintain integrations between security tools and AI inference services.
Instrument automation pipelines with metrics, logging, and alerts.
Write tests for playbooks and automation logic; conduct purple-team exercises.
Partner with AI/ML, DevSecOps, and IT teams to embed automation in change workflows.

🎯 Requirements

5+ years in security engineering, SecOps, or automation roles
Proficiency in Python and/or Go for scripting and tooling
Hands-on SOAR experience (Splunk SOAR, Palo Alto XSOAR, Tines, or similar)
Experience with SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle)
REST API integration and event-driven architecture
Understanding of threat detection logic (MITRE ATT&CK, kill chain)

Apply on employer's website

This employer gathers applications via their own applicant tracking system.

You will be redirected to an external application form.

Share job

Meet JobCopilot: Your Personal AI Job Hunter

Automatically Apply to Engineering Jobs. Just set your preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.

Activate JobCopilot