Security Automation Engineer

Security Automation Engineer This position is responsible for engineering the Barracuda XDR SOAR platform, conducting R&D efforts on forward facing technologies, and executing offensive security operations efforts through the attack/defend lifecycle to test and validate effectiveness of in-place detections. Responsibilities Engineering the Barracuda XDR SOAR solution. Sprint tasks within the SOC Agile Sprint cycle to continuously improve overall SOC maturity level and R&D efforts. Develop and maintain documentation on new processes, tools, technologies, and ongoing R&D efforts. Integrate various APIs into the SOC tech stack. Conduct proactive threat hunting among partners' networks to identify malicious activity. Perform attack and defend activities to test current detections and develop new detections. Ensure MITRE ATT&CK Framework coverage is obtained by XDR detections. Conduct threat intelligence research. Train new and current cyber security analysts on existing or new technologies, new or existing processes. Be on a rotating 24x7x365 on-call schedule to investigate, triage, and help customers remediate active breaches/incidents. Design and implement AI-driven security automations, including Agentic AI workflows to autonomously investigate, triage, and respond to alerts. Build and maintain Retrieval-Augmented Generation (RAG) pipelines to enhance threat intelligence enrichment, alert context, and analyst decision‑making. Develop and integrate AI agents with SOC tooling (SIEM, SOAR, EDR) to reduce manual effort and improve response times. Leverage LLMs and AI frameworks to automate repetitive SOC tasks such as alert analysis, ticket generation, and incident summarization. Integrate and manage MCP servers and agent orchestration frameworks to enable scalable, modular AI‑driven workflows. Experiment with and operationalize machine learning models for anomaly detection, alert prioritization, and signal‑to‑noise improvement. Drive R&D initiatives focused on applying Generative AI in cybersecurity, including detection engineering, threat hunting, and purple team exercises. Build internal tools and prototypes that combine security data pipelines with AI capabilities to improve SOC efficiency and accuracy. Qualifications 4–5 years prior cybersecurity or SOC experience. Bachelor's degree or Master's Degree in Cyber Security, Information Security, or related field. Certifications: CIH, CEH, CompTIA Network+ or Security+, or other relevant certification. Experience working with various SOC tools including SIEM, SOAR, EDR, email protection, sandboxes, ticketing systems, etc. Expertise with analyzing advanced attack vectors such as ransomware, Business Email Compromise, etc. Experience responding to active security threats and incidents. Experience with cloud tools such as AWS, Azure, and GCP. Experience working with APIs. Analytical, problem‑solving skills with SOAR platform troubleshooting. Customer service experience. Experience with threat intelligence research, IOC gathering, and threat hunting. Understanding of cybersecurity frameworks such as NIST, MITRE ATT&CK, etc. Fundamental understanding of corporate IT environments, including networking and cloud infrastructure. Excellent verbal and written communication skills. Hands‑on experience building or working with Agentic AI systems, including multi‑step autonomous workflows and tool‑using agents. Experience implementing RAG architectures, including vector databases, embeddings, and context retrieval strategies. Familiarity with LLMs (e.g., OpenAI, open‑source models) and their application in cybersecurity use cases. Experience integrating AI into production environments, including API orchestration and automation pipelines. Experience with MCP servers, agent frameworks, or similar orchestration systems for managing AI‑driven workflows. Strong understanding of how to apply AI/ML to security operations problems such as alert fatigue, threat detection, and incident response. Ability to evaluate and tune AI outputs for accuracy, reliability, and security relevance in a SOC environment. Benefits Equity, in the form of non‑qualifying options. High‑quality health benefits. Retirement Plan with employer match. Career‑growth opportunities. Flexible Time Off and Paid Time Off benefits. Volunteer opportunities. Compensation The anticipated salary range for this role is 105,000 to 140,000 OTE. Actual compensation offered will be dependent upon the individual's skills, experience, and qualifications as they directly relate to the requirements of the position, the budget for the position, and applicable employment laws. At Barracuda, we believe in fair and equitable compensation practices that reflect both market realities and the unique circumstances of each geographical location. We recognize that cost‑of‑living disparities, market conditions, and other factors can significantly impact compensation expectations in different regions. The compensation range provided in this job description is for illustrative purposes only and may not reflect the actual compensation offers for the position in your location. Final compensation will be determined based on a variety of factors including the candidates’ qualifications and experience. Equal Opportunity Employment We believe that a diverse workforce adds to our collective value and strength as an organization. Barracuda Networks is proud to be an employer that complies with all applicable national, state, and local laws pertaining to nondiscrimination and equal opportunity regardless of race, gender, religion, sex, sexual orientation, national origin, or disability. #J-18808-Ljbffr Barracuda Networks