RemoteLeaf Logo
Log in Sign up

Security Automation Engineer (SOAR) - Mid-Atlantic region (Remote)

4 months ago
United States
Full-time
Senior
Security Engineer
DevOps and Infrastructure
AWS Azure Git JIRA JSON LLM Python REST API SIEM SOC
Apply Now
GuidePoint Security

GuidePoint Security

GuidePoint Security is a trusted cybersecurity consulting firm that provides expertise, solutions, and services to help organizations make informed decisions and minimize risks. Their elite team of experts offers holistic perspectives on cybersecurity,...

Internet Software & Services
251-1K
Founded 2011
View All Jobs 14

Description

  • Design and build security automation and orchestration workflows.
  • Support and improve end-to-end SOC processes including alert triage, escalation, incident response, and case management.
  • Integrate security and IT systems using REST APIs, webhooks, and JSON.
  • Develop custom workflow logic and data transformations using Python scripting.
  • Translate manual security processes into reliable automated workflows with error handling, conditional logic, and secure execution.
  • Work with security tooling such as SIEM, EDR/XDR, ticketing, threat intelligence, and email security platforms.
  • Scope automation requirements with clients and turn them into build plans.
  • Apply automation-as-code and version control practices to workflow development.
  • Collaborate in a consulting or professional services environment and provide solution delivery support.

Requirements

  • 5+ years of experience in security operations with an understanding of how a SOC functions end to end.
  • 3+ years of experience designing and building security automation or orchestration workflows.
  • Hands-on experience with at least one SOAR or automation platform; Tines, Torq, or Cortex XSOAR preferred.
  • Proficiency integrating systems through REST APIs, webhooks, and JSON.
  • Scripting experience, primarily in Python, for custom logic and data transforms.
  • Working knowledge of SIEM, EDR/XDR, ticketing systems such as ServiceNow or Jira, threat intelligence, and email security tools.
  • Ability to decompose manual security processes into automated workflows with error handling, conditional logic, and secure runs.
  • Familiarity with LLMs in development and automation contexts, including Claude Code or Codex, is preferred.
  • Exposure to MCP-based integrations is a plus.
  • Ability to independently scope automation requirements with clients and translate them into a build plan.
  • Platform or vendor certifications in Tines, Torq, Cortex XSOAR, Splunk, Microsoft Sentinel, or CrowdStrike are preferred.
  • Cloud experience with AWS or Azure and familiarity with cloud-native security tooling are preferred.
  • Prior delivery experience in a consulting, professional services, or MSSP environment is preferred.
  • Detection engineering exposure such as detections-as-code or Sigma is preferred.
  • Version control and automation-as-code experience with Git or similar repo controls is preferred.

Benefits

  • Remote-first workforce for U.S.-based employees, with some travel or on-site work required for certain federal positions.
  • Medical insurance options with significant employer premium contributions, including PPO and HSA plan choices.
  • Dental insurance with full employee premium coverage and partial family premium coverage.
  • 12 corporate holidays and a Flexible Time Off (FTO) program.
  • Healthy mobile phone and home internet allowance.
  • Retirement plan eligibility after 2 months at open enrollment.
  • Pet benefit option.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

U

Senior Cloud Security & Compliance Engineer

UltraViolet Cyber 501-1000 Computer and Network Security

UltraViolet Cyber is seeking a hands-on Cloud Security Engineer to administer the Wiz platform and automate security controls across AWS, Azure, and GCP environments supporting commercial, federal, and regulated workloads.

United States Full-time Senior Cloud Engineer Security Engineer
$120k-$170k
AWS Azure CI/CD GitHub Actions GitLab GraphQL Jenkins Kubernetes Python Terraform
6 hours, 55 minutes ago
Lookers

Cyber Security Engineer

Lookers 5K-10K Automotive

Lookers is hiring a remote Cyber Security Engineer in the UK to secure its dealership, IT, and online environments and support continuous risk-based security improvements.

United Kingdom Full-time Mid Level Security Engineer
$83k-$83k
Cybersecurity Penetration Testing
7 hours, 25 minutes ago
Kairos Power

Senior Engineer, Platform Security and Reliability

Kairos Power 251-1K Electric Utilities

Kairos Power is seeking a Senior Platform Security and Reliability Engineer to own the security, reliability, and operational health of cloud and high-performance computing platforms supporting nuclear energy design, research, and development.

United States Full-time Senior Platform Engineer Security Engineer
$152k-$190k
AWS DNS Docker GCP Linux Network Security Python Secrets Management TLS
7 hours, 40 minutes ago
PDI Technologies,

Head of Security & Network Operations

PDI Technologies, 1K-5K Gas Utilities

PDI Technologies is seeking a senior operations executive to lead its global, customer-facing SOC and NOC organization, unifying security and network services to improve protection, uptime, scalability, and delivery economics for more than 12,000 customers.

United States Full-time Executive Network Engineer Security Engineer
AWS Azure SIEM
7 hours, 40 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers