RemoteLeaf Logo
Log in Sign up

Security Automation Engineer (SOAR) - Mid-Atlantic region (Remote)

2 months, 3 weeks ago
United States
Full-time
Senior
Security Engineer
DevOps and Infrastructure
AWS Azure Git JIRA JSON LLM Python REST API SIEM SOC
Apply Now
GuidePoint Security

GuidePoint Security

GuidePoint Security is a trusted cybersecurity consulting firm that provides expertise, solutions, and services to help organizations make informed decisions and minimize risks. Their elite team of experts offers holistic perspectives on cybersecurity,...

Internet Software & Services
251-1K
Founded 2011
View All Jobs 24

Description

  • Design and build security automation and orchestration workflows.
  • Support and improve end-to-end SOC processes including alert triage, escalation, incident response, and case management.
  • Integrate security and IT systems using REST APIs, webhooks, and JSON.
  • Develop custom workflow logic and data transformations using Python scripting.
  • Translate manual security processes into reliable automated workflows with error handling, conditional logic, and secure execution.
  • Work with security tooling such as SIEM, EDR/XDR, ticketing, threat intelligence, and email security platforms.
  • Scope automation requirements with clients and turn them into build plans.
  • Apply automation-as-code and version control practices to workflow development.
  • Collaborate in a consulting or professional services environment and provide solution delivery support.

Requirements

  • 5+ years of experience in security operations with an understanding of how a SOC functions end to end.
  • 3+ years of experience designing and building security automation or orchestration workflows.
  • Hands-on experience with at least one SOAR or automation platform; Tines, Torq, or Cortex XSOAR preferred.
  • Proficiency integrating systems through REST APIs, webhooks, and JSON.
  • Scripting experience, primarily in Python, for custom logic and data transforms.
  • Working knowledge of SIEM, EDR/XDR, ticketing systems such as ServiceNow or Jira, threat intelligence, and email security tools.
  • Ability to decompose manual security processes into automated workflows with error handling, conditional logic, and secure runs.
  • Familiarity with LLMs in development and automation contexts, including Claude Code or Codex, is preferred.
  • Exposure to MCP-based integrations is a plus.
  • Ability to independently scope automation requirements with clients and translate them into a build plan.
  • Platform or vendor certifications in Tines, Torq, Cortex XSOAR, Splunk, Microsoft Sentinel, or CrowdStrike are preferred.
  • Cloud experience with AWS or Azure and familiarity with cloud-native security tooling are preferred.
  • Prior delivery experience in a consulting, professional services, or MSSP environment is preferred.
  • Detection engineering exposure such as detections-as-code or Sigma is preferred.
  • Version control and automation-as-code experience with Git or similar repo controls is preferred.

Benefits

  • Remote-first workforce for U.S.-based employees, with some travel or on-site work required for certain federal positions.
  • Medical insurance options with significant employer premium contributions, including PPO and HSA plan choices.
  • Dental insurance with full employee premium coverage and partial family premium coverage.
  • 12 corporate holidays and a Flexible Time Off (FTO) program.
  • Healthy mobile phone and home internet allowance.
  • Retirement plan eligibility after 2 months at open enrollment.
  • Pet benefit option.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

MKS2 Technologies

Quantum Computing / Cryptography Engineer

MKS2 Technologies 51-250 Internet Software & Services

MKS2 Technologies is seeking a remote Quantum Computing / Cryptography Engineer to support a federal program by advancing cryptographic modernization, quantum readiness, and post-quantum security migration planning.

United States Full-time Lead Security Engineer
$200k-$230k
C++ Cybersecurity Encryption Java Python
16 hours, 56 minutes ago
Axle Informatics

Cybersecurity Research Assistant

Axle Informatics 51-250 Pharmaceuticals

Axle is seeking a remote Cybersecurity Research Assistant in the United States to support rare disease research at NIH by implementing and monitoring security controls across Kubernetes, Linux, database, and high-performance computing environments.

United States Full-time Junior Security Engineer
$85k-$110k
Ansible Bash Cybersecurity DNS Elasticsearch Git Grafana Kubernetes Linux LLM Prometheus Python RHEL Secrets Management TCP/IP Terraform TLS Ubuntu
17 hours, 11 minutes ago
True Zero Technologies

Cyber Security Engineer (R-00206)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is seeking Cybersecurity Engineers to support enterprise Zero Trust implementation by integrating security capabilities, validating controls, and producing technical evidence for authorization activities.

Anywhere Full-time Mid Level Security Engineer
Cybersecurity Network Security
17 hours, 41 minutes ago
True Zero Technologies

Zero Trust Engineer (R-00205)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is seeking Zero Trust Engineers to implement enterprise Zero Trust use cases across prioritized Department of Veterans Affairs information systems and guide them through planning, validation, testing, and operational transition.

Anywhere Full-time Senior Security Engineer
Azure Cybersecurity
1 day, 16 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers