Senior Security Automation Engineer

What you'll do

• Build and maintain SOAR playbooks, custom services, APIs, connectors, and agentic AI workflows across the security stack.
• Partner with Detection Engineering to automate responses to detection rules and own incident-response containment and remediation actions.
• Operate and improve production automation, including policy enforcement, reliability metrics, issue triage, and documentation.

What they ask for

• 7+ years in security engineering, software engineering, or security automation, with production-code delivery experience.
• Experience designing, building, and operating enterprise-scale APIs, services, or orchestration systems.
• Hands-on SOAR playbook development and maintenance, including Python custom actions, connectors, and logic; advanced Python or comparable-language proficiency.
• Experience deploying agentic AI systems; practical incident-response knowledge; REST API integrations with detection/SIEM, identity/access, and ticketing systems.

Nice to have

• Production experience with autonomous agentic response or reusable agent orchestration frameworks.
• Experience with identity/access systems such as Okta or Entra ID, event-driven architectures, Detection-as-Code, or CI/CD for security content.

Pay

$144,800 - $261,450 annually USD (base salary); $180,600 - $261,450 USD (base salary); $170,900 - $247,550 USD (base salary)

Tools

SOAR, Splunk SOAR, Tines, XSOAR, Python, REST APIs, Okta, Entra ID

AI focus

Design and deploy agentic AI systems and autonomous multi-step workflows for security enrichment, correlation, containment, and response; use AI-assisted development tools and integrate AI into day-to-day work.