Security Automation Engineer

Junior SOAR Engineer

Frisco location

$50,000 salary

We are seeking a Junior SOAR Engineer to support the development, maintenance, and optimization of security orchestration, automation, and response (SOAR) workflows. This role will work closely with Security Operations, Infrastructure, and DevOps teams to automate repetitive security tasks, improve incident response processes, and integrate security tools to enhance operational efficiency.

Key Responsibilities

• Design, build, test, and maintain security automation workflows and playbooks for alert enrichment, triage, escalation, notification, and response activities.
• Support integrations between security and IT platforms using APIs, webhooks, scripts, and connectors.
• Collaborate with security analysts to identify automation opportunities and translate manual processes into repeatable workflows.
• Monitor automation health, troubleshoot workflow failures, and resolve integration issues.
• Assist with incident response activities through automated and semi-automated response actions.
• Maintain documentation for playbooks, integrations, workflows, and operational procedures.
• Participate in continuous improvement initiatives to enhance detection, response, and analyst efficiency.
• Collaborate with cross-functional teams to ensure automation solutions align with security, operational, and compliance requirements.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
• 0–2 years of experience in cybersecurity, security operations, automation engineering, DevOps, or a related technical field.
• Basic scripting experience with Python, PowerShell, Bash, or similar languages.
• Understanding of APIs, JSON, webhooks, and system integrations.
• Familiarity with security operations, incident response, SIEM, SOAR, or alert management platforms is preferred.
• Strong troubleshooting, documentation, communication, and collaboration skills.

Preferred Experience

• Security tooling integrations
• SOAR and SIEM platforms
• Incident response processes
• Cloud environments
• Version control and CI/CD practices

This is an excellent opportunity for an early-career cybersecurity professional looking to build expertise in security automation, orchestration, and incident response within a fast-paced environment.