RemoteLeaf Logo
Log in Sign up

Security Automation Engineer (SOAR) - Mid-Atlantic region (Remote)

3 months, 1 week ago
United States
Full-time
Senior
Security Engineer
DevOps and Infrastructure
AWS Azure Git JIRA JSON LLM Python REST API SIEM SOC
Apply Now
GuidePoint Security

GuidePoint Security

GuidePoint Security is a trusted cybersecurity consulting firm that provides expertise, solutions, and services to help organizations make informed decisions and minimize risks. Their elite team of experts offers holistic perspectives on cybersecurity,...

Internet Software & Services
251-1K
Founded 2011
View All Jobs 17

Description

  • Design and build security automation and orchestration workflows.
  • Support and improve end-to-end SOC processes including alert triage, escalation, incident response, and case management.
  • Integrate security and IT systems using REST APIs, webhooks, and JSON.
  • Develop custom workflow logic and data transformations using Python scripting.
  • Translate manual security processes into reliable automated workflows with error handling, conditional logic, and secure execution.
  • Work with security tooling such as SIEM, EDR/XDR, ticketing, threat intelligence, and email security platforms.
  • Scope automation requirements with clients and turn them into build plans.
  • Apply automation-as-code and version control practices to workflow development.
  • Collaborate in a consulting or professional services environment and provide solution delivery support.

Requirements

  • 5+ years of experience in security operations with an understanding of how a SOC functions end to end.
  • 3+ years of experience designing and building security automation or orchestration workflows.
  • Hands-on experience with at least one SOAR or automation platform; Tines, Torq, or Cortex XSOAR preferred.
  • Proficiency integrating systems through REST APIs, webhooks, and JSON.
  • Scripting experience, primarily in Python, for custom logic and data transforms.
  • Working knowledge of SIEM, EDR/XDR, ticketing systems such as ServiceNow or Jira, threat intelligence, and email security tools.
  • Ability to decompose manual security processes into automated workflows with error handling, conditional logic, and secure runs.
  • Familiarity with LLMs in development and automation contexts, including Claude Code or Codex, is preferred.
  • Exposure to MCP-based integrations is a plus.
  • Ability to independently scope automation requirements with clients and translate them into a build plan.
  • Platform or vendor certifications in Tines, Torq, Cortex XSOAR, Splunk, Microsoft Sentinel, or CrowdStrike are preferred.
  • Cloud experience with AWS or Azure and familiarity with cloud-native security tooling are preferred.
  • Prior delivery experience in a consulting, professional services, or MSSP environment is preferred.
  • Detection engineering exposure such as detections-as-code or Sigma is preferred.
  • Version control and automation-as-code experience with Git or similar repo controls is preferred.

Benefits

  • Remote-first workforce for U.S.-based employees, with some travel or on-site work required for certain federal positions.
  • Medical insurance options with significant employer premium contributions, including PPO and HSA plan choices.
  • Dental insurance with full employee premium coverage and partial family premium coverage.
  • 12 corporate holidays and a Flexible Time Off (FTO) program.
  • Healthy mobile phone and home internet allowance.
  • Retirement plan eligibility after 2 months at open enrollment.
  • Pet benefit option.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Raya

DevSecOps Engineer

Raya 51-250 Internet Software & Services

Raya is hiring a DevSecOps Engineer to evolve its multi-regional infrastructure platform, delivering secure, reliable, scalable systems that enable product engineering teams to innovate confidently.

Anywhere Full-time Senior DevOps Engineer Security Engineer
Ansible AWS Azure Bash CI/CD Datadog Docker Elasticsearch GCP Go Grafana Kubernetes MongoDB Network Security Node.js PostgreSQL Prometheus Pulumi Python Redis Ruby Terraform
1 hour, 52 minutes ago
JumpCloud

Senior Software Engineer - Privileged Access Management (PAM / IAM)- India

JumpCloud 251-1K Internet Software & Services

JumpCloud is hiring a remote Senior/Lead Software Engineer to evolve its core AI-powered IT management platform through secure, scalable architecture, enterprise PAM integration, reliable delivery, and AI-assisted engineering practices.

India Full-time Lead Security Engineer Software Engineer
Agile AWS C# Docker Go gRPC HashiCorp Vault Kubernetes Linux macOS Microservices .NET Playwright PostgreSQL REST API SQL Server TypeScript
1 hour, 52 minutes ago
VEIC

Information Security Engineer II

VEIC 251-1K Professional Services

VEIC is seeking an Information Security Engineer II to operate its blue-team security program by responding to incidents, engineering security technologies, and strengthening controls across company systems.

United States Full-time Mid Level Security Engineer
$90k-$100k
Linux PowerShell Python SIEM Splunk TCP/IP
2 hours, 7 minutes ago
Caseware

Security Senior Software Developer

Caseware 251-1K Internet Software & Services

Caseware is hiring a Senior Software Developer III in Colombia to provide technical leadership while designing, operating, and evolving its cloud accounting and audit software platform.

Colombia Full-time Lead Security Engineer Software Engineer
AWS AWS CDK Azure C++ CI/CD Docker Encryption GCP GitHub GraphQL Java JIRA JUnit Kubernetes Microservices New Relic PostgreSQL REST API Spring Boot Terraform
2 hours, 22 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers