Cybersecurity Automation Engineer SOAR SOC

Salary: $106,000 - 146,000 per year Requirements:

• We are looking for at least three years of experience as a Cybersecurity Engineer, Security Automation Engineer, SOAR Engineer, or in a comparable role; five to seven years of relevant experience is especially well aligned.
• We need hands-on experience building security automation with one or more programming or scripting languages such as Python, PowerShell, C#, SQL, or JavaScript.
• We require practical experience with SOAR or security orchestration platforms such as ServiceNow Security Operations, Palo Alto Cortex XSOAR/Demisto, or Splunk Phantom/SOAR.
• We value experience automating Security Operations Center workflows, including alert enrichment, triage, incident response, threat hunting, or vulnerability management.
• We are seeking a strong understanding of security architecture, threat modeling, risk assessment, and cybersecurity frameworks.
• We expect knowledge of network and system security technologies, including firewalls, IDS/IPS, endpoint security platforms, and security monitoring tools.
• We need understanding of cloud security principles and experience supporting AWS, Microsoft Azure, or Google Cloud environments.
• We prefer familiarity with DevSecOps practices and embedding security controls into CI/CD pipelines.
• We look for the ability to build API-based integrations between cybersecurity platforms, data sources, and enterprise tools.
• We value strong analytical, troubleshooting, and problem-solving skills.
• We need the ability to communicate effectively and collaborate in a fast-moving, cross-functional security environment.
• A bachelors degree in computer science, information security, or a related field is preferred, and a masters degree is beneficial.

• We design, develop, and maintain automated solutions that detect, investigate, and respond to cybersecurity threats.
• We build security orchestration workflows that support incident response, threat hunting, vulnerability management, and compliance monitoring.
• We optimize Security Operations Center processes by reducing manual effort, improving response times, and increasing detection accuracy.
• We develop custom scripts, tools, integrations, and frameworks for security testing, data analysis, and threat intelligence.
• We integrate cybersecurity controls and automated safeguards into development, deployment, and CI/CD processes.
• We partner with cross-functional teams to identify security requirements and implement technologies aligned with our security strategy.
• We improve existing automation processes based on operational outcomes, emerging threats, and changing security needs.
• We support security assessments, penetration tests, and red-team exercises to identify vulnerabilities and evaluate security controls.
• We monitor evolving attack methods, vulnerabilities, and industry trends to recommend proactive mitigation strategies.
• We integrate SOAR, cloud security, endpoint security, network security, and threat intelligence technologies across our enterprise environment.

• API
• AWS
• Azure
• C#
• CI/CD
• Cloud
• DevSecOps
• Support
• JavaScript
• Network
• PowerShell
• Python
• SQL
• Security
• ServiceNow
• Splunk

More:

We are a global financial institution with a high-performing information security team focused on protecting sensitive financial data, critical infrastructure, and business operations from evolving cyber threats. This is a hybrid opportunity based in Charlotte, North Carolina, and offers the chance to contribute to enterprise-scale cybersecurity initiatives in a collaborative, fast-paced environment. We work closely across cybersecurity, cloud, DevSecOps, infrastructure, engineering, and application development teams, and you will gain exposure to advanced SOAR platforms, threat intelligence, red-team exercises, and security testing. This role is available on a W2 basis only, with no C2C or 1099 arrangements.

last updated 36 week of 2026