Security Automation Engineer

Salary: $96,000 - 136,000 per year Requirements:

• Were looking for 4–5 years of prior cybersecurity or SOC experience.
• We expect a bachelors or masters degree in Cyber Security, Information Security, or related field experience.
• We value relevant certifications such as CIH, CEH, CompTIA Network+, Security+, or similar credentials.
• We need experience using SOC tools such as SIEM, SOAR, EDR, email protection, sandboxes, and ticketing systems.
• We look for expertise in analyzing advanced attack vectors, including ransomware and business email compromise.
• We require experience responding to live security threats and incidents.
• We prefer experience with cloud platforms and tools such as AWS, Azure, and GCP.
• We expect experience working with APIs.
• We need strong troubleshooting and analytical problem-solving skills in a SOAR or similar technical environment.
• We value customer service experience.
• We look for experience with threat intelligence research, IOC collection, and threat hunting.
• We expect familiarity with cybersecurity frameworks such as NIST and MITRE ATT&CK.
• We need a solid understanding of corporate IT environments, including networking and cloud infrastructure.
• We require excellent verbal and written communication skills.
• We look for hands-on experience with Agentic AI systems, including multi-step autonomous workflows and tool-using agents.
• We value experience implementing RAG architectures, including vector databases, embeddings, and retrieval strategies.
• We want familiarity with LLMs and their use in cybersecurity applications.
• We need experience integrating AI into production environments, including API orchestration and automation pipelines.
• We look for exposure to MCP servers, agent frameworks, or comparable orchestration systems.
• We expect a strong understanding of applying AI/ML to security operations challenges such as alert fatigue, threat detection, and incident response.
• We value the ability to assess and refine AI outputs for accuracy, reliability, and SOC relevance.

• We engineer our Barracuda XDR SOAR solution.
• We complete sprint work within our SOC Agile cycle to improve SOC maturity and advance R&D initiatives.
• We create and maintain documentation for new processes, tools, technologies, and ongoing research efforts.
• We integrate a range of APIs into our SOC technology stack.
• We proactively hunt threats across partner networks to identify malicious activity.
• We perform attack-and-defend exercises to validate current detections and build new ones.
• We ensure our XDR detections provide coverage aligned to the MITRE ATT&CK framework.
• We conduct threat intelligence research.
• We train new and existing cybersecurity analysts on technologies and processes.
• We participate in a rotating 24x7x365 on-call schedule to investigate, triage, and support remediation of active breaches and incidents.
• We design and implement AI-driven security automations, including Agentic AI workflows that investigate, triage, and respond to alerts.
• We build and maintain RAG pipelines to improve threat intelligence enrichment, alert context, and analyst decision-making.
• We develop and connect AI agents with SOC tools such as SIEM, SOAR, and EDR to reduce manual work and speed up response.
• We use LLMs and AI frameworks to automate repetitive SOC tasks such as alert analysis, ticket creation, and incident summarization.
• We integrate and manage MCP servers and agent orchestration frameworks to support scalable, modular AI workflows.
• We experiment with and operationalize machine learning models for anomaly detection, alert prioritization, and improved signal-to-noise.
• We drive R&D efforts applying Generative AI to cybersecurity, including detection engineering, threat hunting, and purple team exercises.
• We build internal tools and prototypes that combine security data pipelines with AI capabilities to improve SOC efficiency and accuracy.

• Agentic AI
• AI
• AI Agents
• API
• AWS
• Azure
• Cloud
• GCP
• Support
• Machine Learning
• MCP
• Network
• RAG
• Security

More:

We are Barracuda, a company focused on making the world a safer place by delivering cloud-enabled, enterprise-grade security solutions that are easy to buy, deploy, and use. We protect email, networks, data, and applications for more than 200,000 organizations worldwide. Were hiring for a remote Security Automation Engineer role on our security operations team, with a strong emphasis on Barracuda XDR SOAR, purple team work, and AI-driven security automation. We offer a collaborative environment where team members can share ideas and make an impact, along with internal mobility, cross-training, equity in the form of non-qualifying options, high-quality health benefits, a retirement plan with employer match, career growth opportunities, flexible time off and paid time off, and volunteer opportunities. The advertised salary range is 105,000 to 140,000 OTE, with final compensation based on skills, experience, qualifications, budget, and location.

last updated 36 week of 2026