RemoteLeaf Logo
Log in Sign up

Security Automation Engineer (SOAR) - Mid-Atlantic region (Remote)

2 months ago
United States
Full-time
Senior
Security Engineer
DevOps and Infrastructure
AWS Azure Git JIRA JSON LLM Python REST API SIEM SOC
Apply Now
GuidePoint Security

GuidePoint Security

GuidePoint Security is a trusted cybersecurity consulting firm that provides expertise, solutions, and services to help organizations make informed decisions and minimize risks. Their elite team of experts offers holistic perspectives on cybersecurity,...

Internet Software & Services
251-1K
Founded 2011
View All Jobs 33

Description

  • Design and build security automation and orchestration workflows.
  • Support and improve end-to-end SOC processes including alert triage, escalation, incident response, and case management.
  • Integrate security and IT systems using REST APIs, webhooks, and JSON.
  • Develop custom workflow logic and data transformations using Python scripting.
  • Translate manual security processes into reliable automated workflows with error handling, conditional logic, and secure execution.
  • Work with security tooling such as SIEM, EDR/XDR, ticketing, threat intelligence, and email security platforms.
  • Scope automation requirements with clients and turn them into build plans.
  • Apply automation-as-code and version control practices to workflow development.
  • Collaborate in a consulting or professional services environment and provide solution delivery support.

Requirements

  • 5+ years of experience in security operations with an understanding of how a SOC functions end to end.
  • 3+ years of experience designing and building security automation or orchestration workflows.
  • Hands-on experience with at least one SOAR or automation platform; Tines, Torq, or Cortex XSOAR preferred.
  • Proficiency integrating systems through REST APIs, webhooks, and JSON.
  • Scripting experience, primarily in Python, for custom logic and data transforms.
  • Working knowledge of SIEM, EDR/XDR, ticketing systems such as ServiceNow or Jira, threat intelligence, and email security tools.
  • Ability to decompose manual security processes into automated workflows with error handling, conditional logic, and secure runs.
  • Familiarity with LLMs in development and automation contexts, including Claude Code or Codex, is preferred.
  • Exposure to MCP-based integrations is a plus.
  • Ability to independently scope automation requirements with clients and translate them into a build plan.
  • Platform or vendor certifications in Tines, Torq, Cortex XSOAR, Splunk, Microsoft Sentinel, or CrowdStrike are preferred.
  • Cloud experience with AWS or Azure and familiarity with cloud-native security tooling are preferred.
  • Prior delivery experience in a consulting, professional services, or MSSP environment is preferred.
  • Detection engineering exposure such as detections-as-code or Sigma is preferred.
  • Version control and automation-as-code experience with Git or similar repo controls is preferred.

Benefits

  • Remote-first workforce for U.S.-based employees, with some travel or on-site work required for certain federal positions.
  • Medical insurance options with significant employer premium contributions, including PPO and HSA plan choices.
  • Dental insurance with full employee premium coverage and partial family premium coverage.
  • 12 corporate holidays and a Flexible Time Off (FTO) program.
  • Healthy mobile phone and home internet allowance.
  • Retirement plan eligibility after 2 months at open enrollment.
  • Pet benefit option.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Hummingbird

Senior Security Engineer

Hummingbird 1K-5K Professional Services

Hummingbird is hiring a Senior Security Engineer to own and strengthen security for its remote-first SaaS platform that helps financial institutions fight financial crime.

Anywhere Senior Security Engineer
AWS Azure CircleCI Docker Encryption GraphQL JavaScript Network Security PostgreSQL Python React Redis Ruby Ruby on Rails Terraform TypeScript
1 day, 16 hours ago
Kalles Group

Principal IAM Engineer Consultant

Kalles Group 11-50 Internet Software & Services

Kalles Group is hiring a remote Principal IAM Engineer Consultant to lead engineering design and delivery for a customer identity and access management platform in a highly regulated financial services environment.

Anywhere Full-time Lead Security Engineer Software Engineer
$160k-$220k
DevSecOps Microservices REST API SAML
2 days, 16 hours ago
PlayStation

Senior Security Research Engineer

PlayStation 100K+ Household Durables

Sony Interactive Entertainment is hiring a Senior Security Research Engineer to lead Global Vulnerability Management efforts that advance its Threat Exposure Management program and strengthen security risk reduction across the PlayStation ecosystem.

United States Full-time Lead Research Scientist Security Engineer
$176k-$263k
Bash CI/CD Domo Git JavaScript PowerShell Python Snowflake SQL
2 days, 16 hours ago
Dragos

Senior Capabilities Developer

Dragos 251-1K Professional Services

Dragos is hiring a Senior Capabilities Developer to build and maintain the Synapse-based threat intelligence infrastructure that powers analysis and reporting for critical infrastructure cybersecurity.

United States Full-time Senior Security Engineer Software Engineer
$152k-$152k
2 days, 16 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers