SOAR and AI Engineer - Managed Security

2 days, 10 hours ago
Full-time
Junior
Artificial Intelligence and Machine Learning
AHEAD

AHEAD

AHEAD accelerates the impact of technology on clients by engineering customized data, developer, and infrastructure platforms that improve IT operations. By weaving together cloud infrastructure, intelligent operations, and modern applications, we help...

IT Services
1K-5K
$43M raised

Description

  • Design, develop, and maintain security automation workflows in the SOAR platform.
  • Build automated playbooks for alert triage, enrichment, containment, escalation, evidence gathering, and case management.
  • Partner with SOC analysts, SIEM engineers, threat detection engineers, and incident responders to automate repeatable processes.
  • Design and implement integrations across SOAR, SIEM, ticketing, collaboration, endpoint, identity, firewall, threat intelligence, and cloud security tools.
  • Develop scripts and tooling in Python or similar languages to automate tasks, support integrations, and normalize data.
  • Apply AI and machine learning to improve analyst efficiency, alert summarization, triage, investigation support, and operational reporting.
  • Evaluate, test, and operationalize AI-assisted security use cases with guardrails for accuracy, security, and auditability.
  • Monitor the health, performance, and reliability of automation platforms and workflows.
  • Build dashboards, reports, and metrics for automation adoption, workflow effectiveness, throughput, response time, and platform health.
  • Contribute to automation and AI roadmap planning, including use case identification and process standardization.

Requirements

  • 2–4 years of experience in Information Security, Incident Response, SOAR engineering, security automation, detection engineering, or related fields.
  • Strong experience with SOAR platforms, preferably Swimlane and Palo Alto XSOAR.
  • Strong experience with security automation, orchestration, and systems integration in enterprise or managed security environments.
  • Experience writing automation tools and integrations in Python or other languages.
  • Experience working with APIs, webhooks, JSON, authentication methods, and event-driven integrations.
  • Experience with SIEM platforms and common security operations workflows.
  • Familiarity with AI-assisted operations, LLM-enabled workflows, or practical AI use in security operations.
  • Hands-on experience with common security technologies such as IDS, firewall, SIEM, SOAR, EDR, IAM, email security, and cloud security tools.
  • Bachelor’s degree in Computer Science, Information Security, Engineering, or related/equivalent experience.
  • Preferred certifications include CISSP, GCIH, GCIA, GMON, GPYC, relevant SOAR certifications, cloud security certifications, or security automation-related credentials.

Benefits

  • Medical, dental, and vision insurance.
  • 401(k) retirement plan.
  • Paid company holidays.
  • Paid time off.
  • Paid parental and caregiver leave.
  • On-the-job learning support, including cross-department training and sponsored certifications.
  • Access to a multi-million-dollar technology lab.
  • OTE-based compensation range with base salary plus target bonus, varying by experience, qualifications, and location.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Cybersecurity Engineer SME

Electrosoft 51-250 Internet Software & Services

Electrosoft Services, LLC is seeking a Cybersecurity Subject Matter Expert to serve as the senior advisor and technical lead supporting DoD cybersecurity compliance, risk management, and enterprise security initiatives.

Cybersecurity
9 hours, 47 minutes ago

Grupo QuintoAndar | Senior Software Engineer - IAM

QuintoAndar 1K-5K Real Estate

Grupo QuintoAndar is hiring a Senior Software Engineer for its IAM team to build and operate the authentication and authorization systems that secure access across its Latin American real estate platform.

Agile AWS CI/CD GCP Git Go Java JWT Kotlin Kubernetes OpenID Connect Python REST API SAML
10 hours, 32 minutes ago

Grupo QuintoAndar | Sênior Security Engineer (DataSecurity)

QuintoAndar 1K-5K Real Estate

Grupo QuintoAndar is hiring a Senior Security Engineer to design and scale data security controls across its cloud and data ecosystem in a remote-first Brazil-based technology team.

Apache Airflow Apache Spark AWS Bash Cybersecurity Databricks Encryption GCP HashiCorp Vault Kafka LLM Machine Learning Python Terraform
10 hours, 32 minutes ago

Senior Data Engineer + AI

Coforge 10K-50K IT Services

Coforge is hiring a Senior Data Engineer + AI to build and maintain cloud-native data platforms and AI-powered applications for internal and customer-facing use.

Apache Spark AWS CI/CD Databricks dbt LLM Python SQL TypeScript
11 hours, 2 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers