Security Automation Engineer

📋 Description

• Design and operate SOAR playbooks and AI workflows for alert triage and response.
• Translate detection logic and AI outputs into actionable alerts; tune thresholds.
• Build and maintain integrations between SIEM/EDR/TIP/identity tools and AI services via APIs.
• Instrument automation pipelines with metrics, logging, and alerts for production trust.
• Write tests for playbooks and automation logic; run purple-team exercises.
• Collaborate with AI/ML, DevSecOps, and IT to embed automation in infra changes.

🎯 Requirements

• 5+ years in security engineering, SecOps, or automation
• Proficiency in Python and/or Go for scripting and tooling
• Hands-on SOAR experience (Splunk SOAR, XSOAR, or similar)
• Experience with SIEM platforms (Splunk, Microsoft Sentinel, Chronicle)
• REST API integration and event-driven architecture
• Understanding of threat detection logic (MITRE ATT&CK)

🎁 Benefits

• Equal opportunity employer
• Commitment to a diverse, inclusive workplace
• Reasonable accommodations for protected disabilities