SOAR and AI Engineer - Managed Security

2 weeks, 6 days ago
Full-time
Junior
Artificial Intelligence and Machine Learning
AHEAD

AHEAD

AHEAD accelerates the impact of technology on clients by engineering customized data, developer, and infrastructure platforms that improve IT operations. By weaving together cloud infrastructure, intelligent operations, and modern applications, we help...

IT Services
1K-5K
$43M raised

Description

  • Design, develop, and maintain security automation workflows in the SOAR platform.
  • Build automated playbooks for alert triage, enrichment, containment, escalation, evidence gathering, and case management.
  • Partner with SOC analysts, SIEM engineers, threat detection engineers, and incident responders to automate repeatable processes.
  • Design and implement integrations across SOAR, SIEM, ticketing, collaboration, endpoint, identity, firewall, threat intelligence, and cloud security tools.
  • Develop scripts and tooling in Python or similar languages to automate tasks, support integrations, and normalize data.
  • Apply AI and machine learning to improve analyst efficiency, alert summarization, triage, investigation support, and operational reporting.
  • Evaluate, test, and operationalize AI-assisted security use cases with guardrails for accuracy, security, and auditability.
  • Monitor the health, performance, and reliability of automation platforms and workflows.
  • Build dashboards, reports, and metrics for automation adoption, workflow effectiveness, throughput, response time, and platform health.
  • Contribute to automation and AI roadmap planning, including use case identification and process standardization.

Requirements

  • 2–4 years of experience in Information Security, Incident Response, SOAR engineering, security automation, detection engineering, or related fields.
  • Strong experience with SOAR platforms, preferably Swimlane and Palo Alto XSOAR.
  • Strong experience with security automation, orchestration, and systems integration in enterprise or managed security environments.
  • Experience writing automation tools and integrations in Python or other languages.
  • Experience working with APIs, webhooks, JSON, authentication methods, and event-driven integrations.
  • Experience with SIEM platforms and common security operations workflows.
  • Familiarity with AI-assisted operations, LLM-enabled workflows, or practical AI use in security operations.
  • Hands-on experience with common security technologies such as IDS, firewall, SIEM, SOAR, EDR, IAM, email security, and cloud security tools.
  • Bachelor’s degree in Computer Science, Information Security, Engineering, or related/equivalent experience.
  • Preferred certifications include CISSP, GCIH, GCIA, GMON, GPYC, relevant SOAR certifications, cloud security certifications, or security automation-related credentials.

Benefits

  • Medical, dental, and vision insurance.
  • 401(k) retirement plan.
  • Paid company holidays.
  • Paid time off.
  • Paid parental and caregiver leave.
  • On-the-job learning support, including cross-department training and sponsored certifications.
  • Access to a multi-million-dollar technology lab.
  • OTE-based compensation range with base salary plus target bonus, varying by experience, qualifications, and location.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

[Job - 31162] Sênior GenIA Developer Python (AWS), Brasil

CI&T 5K-10K Internet Software & Services

A CI&T busca um(a) Desenvolvedor(a) Backend Sênior Python/IA (AWS) no Brasil para atuar em um projeto do setor financeiro, construindo soluções de negócio com Inteligência Artificial Generativa na nuvem.

AWS Generative AI Python SQL
1 day, 7 hours ago

AI Engineer ( Freelancer/Consultant)

Weekday 11-50 Construction & Engineering

A remote, full-time GenAI Engineer role for a Weekday client, focused on building and deploying production-ready LLM, RAG, and agentic AI systems.

AWS Azure Django FastAPI Generative AI Machine Learning MLOps Python
1 day, 8 hours ago

Security Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a Security Engineer for its Cyber Resiliency team to strengthen company-wide information security, support compliance, and enable low-friction protection against cyber threats.

Go Linux macOS Python Shell Scripting
1 day, 8 hours ago

AI Product Engineer,Manufacturing,Logistics Systems Full Stack, Next.js+Supabase

Koi Limited 11-50 Textiles, Apparel & Luxury Goods

Koin Limited is hiring a mid-to-senior AI Product Engineer to build and deploy AI-powered internal applications, automations, and workflows supporting operations across its international multi-brand e-commerce business.

Agile GitHub JSON NetSuite Next.js OAuth PostgreSQL REST API Shopify SQL Supabase TypeScript Vercel
1 day, 8 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers