XSOAR Security Automation Engineer - W2 ONLY
Matlen Silver
Project Details:
"SOAR Engineering & Integrations
- Design, build, and maintain integrations between XSOAR and platforms such as Archer (or other GRC tools), SecurityScorecard (or similar vendor risk tools), and SIEM solutions such as Splunk.
- Develop custom connectors and API-based integrations where native connectors do not exist.
- Normalize, enrich, and correlate data from third-party and external risk sources for operational use.
Third-Party Risk Alerting
- Build alerting logic for vendor-related threats including vendor breaches, risk score degradation, SaaS abuse, and exposure of vendor-managed assets.
- Correlate vendor risk signals with internal telemetry to determine potential business impact.
- Enable SOC workflows for third-party-related detections.
Automation & Playbooks
- Design and implement SOAR playbooks to triage, enrich, and respond to vendor-related alerts.
- Automate response actions such as token revocation, access suspension, ticket creation, and stakeholder notification.
- Maintain and optimize playbooks to reduce manual effort and mean time to respond (MTTR).
- Partner with SOC, Vendor Risk, Threat Modeling, and Detection Engineering teams to translate risk scenarios into automation logic.
- Document integrations, workflows, and playbooks.
- Monitor performance and reliability of SOAR automations."
Non Negotiables
"- 3+ years of experience in security engineering, SOAR engineering, or security automation.
- Hands-on experience with Cortex XSOAR (or similar SOAR platform).
- Experience integrating SIEM platforms such as Splunk.
- Strong API integration and scripting skills (Python, REST, JSON, webhooks).
- Solid understanding of incident response workflows, SaaS security, IAM, and third-party risk.
- Docker, Kubernetes, containerization pipeline, and deployment experience.
- Other security certifications (e.g. CCNA Security, GSEC, GCED, GPPA, etc.).
- Other technical Certifications (e.g. CCNA, RHCE, MCSE, etc.).
- Demonstrated knowledge of Large Language Models (LLMs) and Generative AI, with a focus on Azure AI offerings"
Negotiables
"- Experience integrating Archer, ServiceNow GRC, SecurityScorecard, BitSight, or RiskRecon.
- Knowledge of MITRE ATTACK and detection engineering concepts.
- Experience automating SaaS security actions (token revocation, session termination).
- Familiarity with External Attack Surface Management (EASM) tools"
"SOAR Engineering & Integrations
- Design, build, and maintain integrations between XSOAR and platforms such as Archer (or other GRC tools), SecurityScorecard (or similar vendor risk tools), and SIEM solutions such as Splunk.
- Develop custom connectors and API-based integrations where native connectors do not exist.
- Normalize, enrich, and correlate data from third-party and external risk sources for operational use.
Third-Party Risk Alerting
- Build alerting logic for vendor-related threats including vendor breaches, risk score degradation, SaaS abuse, and exposure of vendor-managed assets.
- Correlate vendor risk signals with internal telemetry to determine potential business impact.
- Enable SOC workflows for third-party-related detections.
Automation & Playbooks
- Design and implement SOAR playbooks to triage, enrich, and respond to vendor-related alerts.
- Automate response actions such as token revocation, access suspension, ticket creation, and stakeholder notification.
- Maintain and optimize playbooks to reduce manual effort and mean time to respond (MTTR).
- Partner with SOC, Vendor Risk, Threat Modeling, and Detection Engineering teams to translate risk scenarios into automation logic.
- Document integrations, workflows, and playbooks.
- Monitor performance and reliability of SOAR automations."
Non Negotiables
"- 3+ years of experience in security engineering, SOAR engineering, or security automation.
- Hands-on experience with Cortex XSOAR (or similar SOAR platform).
- Experience integrating SIEM platforms such as Splunk.
- Strong API integration and scripting skills (Python, REST, JSON, webhooks).
- Solid understanding of incident response workflows, SaaS security, IAM, and third-party risk.
- Docker, Kubernetes, containerization pipeline, and deployment experience.
- Other security certifications (e.g. CCNA Security, GSEC, GCED, GPPA, etc.).
- Other technical Certifications (e.g. CCNA, RHCE, MCSE, etc.).
- Demonstrated knowledge of Large Language Models (LLMs) and Generative AI, with a focus on Azure AI offerings"
Negotiables
"- Experience integrating Archer, ServiceNow GRC, SecurityScorecard, BitSight, or RiskRecon.
- Knowledge of MITRE ATTACK and detection engineering concepts.
- Experience automating SaaS security actions (token revocation, session termination).
- Familiarity with External Attack Surface Management (EASM) tools"
Vacancy posted 3 hours ago
Similar jobs that could be interesting for youBased on the XSOAR Security Automation Engineer - W2 ONLY in United States vacancy
$112.5k - $187.5k
...Development team designs and delivers automation capabilities that strengthen Security Operations Center response and... ...security operations, detection engineering, and supporting technology teams... ...platforms such as Splunk SOAR, Cortex XSOAR, Tines, Torq, or similar...SuggestedFull timeTemporary workWork experience placementWork at officeFlexible hours2 days per week$144.8k - $261.45k
The OpportunityDetection & Automation Engineering operates Adobe's detection and response backbone,... ...detection and containment.As a Senior Security Automation Engineer, you'll design and... ...maintaining SOAR playbooks (Splunk SOAR, Tines, XSOAR, etc.), including custom actions,...SuggestedFull timeTemporary workLocal areaWorldwide- ...Job Summary We are seeking an experienced Automation Engineer – Cortex XSOAR to design, develop, and maintain security automation and orchestration solutions using Palo Alto Networks Cortex XSOAR . The ideal candidate will have strong hands-on experience developing...SuggestedContract work
- ...Secur-Serv is a leading managed services provider of IT, print, and hardware services... ...POSITION SUMMARY The Security Automation Engineer will work with customer(s) supporting our... ...Incident Response efforts leveraging Cortex XSOAR for Security Orchestration Automation...SuggestedWork at officeRemote workWork from home
- ...Job Description Job Description Security Engineer- W2 Only – On site -BB330 BB330 Alameda, CA 3+ Months JOB DESCRIPTION SUMMARY/JOB PURPOSE: The Security Engineer will support the Zero Trust Engineering team in strengthening the security posture of...SuggestedWork at office
- GuidePoint Security is seeking a Senior Security Automation Engineer to design, build, and operate automated security workflows across SOC environments in the United... ...SOAR-driven playbooks using Tines, Torq, or Cortex XSOAR, integrate REST APIs and JSON, and automate alert...Remote job
- ...Role: Senior Security Engineer Location: New York City, NY (Hybrid 3 days) Duration: Contract-2-Hire Pay rate: $75-85/hour W2 Only, client will not consider C2C Job summary: The Senior Security Engineer will serve as a technical leader across identity and...Contract workImmediate start
- ...Job Title: Mobile Automation Engineer Duration: 12-18 Months Location: Charlotte, NC (local candidates only, in-person interview required) Required Pay Scale: $60-65/hr - W2 ***Due to client requirements this role is only open to USC or GC candidates*** Job...Local area
- ...Job Description Job Description Job Title: Database Security Automation Engineer / Database Security Developer Location: Jersey City, NJ... ...Duration: Contract - 11 months Pay Range: $0/hr $0/hr (W2) Job ID: 409963 About BCforward BCforward is a leading...Contract work3 days per week
- ...Job Title: Mobile Automation Engineer All potential applicants are encouraged to scroll through and read the complete job description before... ...-person interview required) Required Pay Scale: $60-65/hr - W2 Due to client requirements this role is only open to USC or...Local areaRemote workWork from home
- Fidelity will not provide immigration sponsorship for this position.Job Description:The RoleAs a Senior Security Automation Engineer in Fidelity’s Security Operations Center, we are building and advancing automation capabilities that strengthen global security operations...Full time
$152k
...-tech, and hyper-connected world. Role OverviewThe Detection Engineering (DE) team within Coupang’s Digital Trust organization designs and operates end-to-end security threat detection and response automation systems. Our mission is to build an AI-powered Security Operations...Temporary workFlexible hours$120k - $165k
...high-density, end-to-end system - reinventing warehouse automation for increased efficiency, speed and flexibility.Who we are... ...and flexibility. What we need We are looking for a Senior Security Automation Engineer to join our Security Automation team within our...Full time$140k - $160k
...Stackline is on a mission to fuel the future of commerce by bringing brands and customers closer together.About The RoleThe Security Automation Engineer is a hands-on role responsible for Stackline's security posture, compliance program, and identity and endpoint platform....Temporary workWork at officeLocal areaImmediate startRemote workNight shift- If you are an internal associate, please login to Workday and apply through Jobs Hub.Job PurposeThe Security Automation Engineer will be responsible for designing and developing software/systems to support the Security tools used in the Information Security Department....Full timeWork at office
$105.7k - $149.28k
...the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time, including CPT/OPT. The Security Automation Engineer builds and supports automation solutions that strengthen the company’s cybersecurity capabilities and improve...16 hoursContract workTemporary workWork experience placementCasual workWork at officeLocal areaRemote workWork from homeWork visaFlexible hours$70 - $75 per hour
...A client of Innova Solutions is immediately hiring for Security Automation Engineer. Position type: Full Time - Contract Duration: 12 Months Location: Columbus, OH AND Irving, TX (3 days onsite/2 Days Remote) As Security Automation Engineer, you will:...Hourly payFull timeContract workTemporary workWork experience placementImmediate startRemote workWorldwideFlexible hours$150k - $170k
...FNF® Automation Solutions Architect FNF® is the leading provider of title insurance and... ...decisions, integration patterns, and engineering best practices within the ORCA program.... ...engineering, with at least 2 years in a security or infrastructure domain ~ Demonstrated...Remote workRelocation$45 - $60 per hour
...Title: Security Automation Engineer Location: Fort Worth, TX, 76155 (Onsite three days a week near DFW Airport) Pay Rate: Between $45 to $60 hourly Length: 12 months + contract Work Authorization: Authorized to work in the United States...Hourly payContract workLocal areaFlexible hours3 days per week$75 - $90 per hour
...Job Description Job Description Job Title: Cloud Automation Security Engineer Location: Plano, TX; Charlotte, NC; Jersey City, NJ Duration... ...11 months Pay Range: $75 to $90/hr basing on location (W2) Job ID: 409805 About BCforward BCforward is a...Contract workRelocation3 days per week- ...Title: Lead Application Security Engineer / Security Generalist Location: Atlanta, GA (Hybrid - 3 days a week onsite) - Locals highly preferred Job Type: W2 Contract Role Overview: As a Security Champion in development teams, the candidate will...Contract workLocal area3 days per week
- Supporting a federal customer, the remote Security Automation Engineer will engineer automated security controls, integrate security scanning tools, and develop workflows to ensure continuous security in the DevSecOps environment. Key responsibilities: Integrate and operate...Remote work
- Delta Air Lines, Inc. is seeking a Security Engineer to help assess, implement, and operationally support security technologies that strengthen... ...You will collaborate with internal customers to understand automation needs, translate them into actionable plans, and help deploy...
- ...hands-on technical role on the Information Security team, responsible for Administering,... ...and access hardening, cloud security engineering, and vulnerability remediation. Success... ...a DevSecOps mindset, and fluency with automation and infrastructure-as-code / security-...Full timeImmediate start
$131k - $271.6k
...software and related services. SAP National Security Services Inc.® (SAP NS2®) is an... ...we leverage best-in-breed technologies engineered by SAP to protect the lives, assets and... ...approval to transfer. NS2 Security Automation Engineers provide technical leadership...Permanent employmentFull timeWorldwideFlexible hours- ...leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations... ...efficiently and effectively – anytime, anywhere, securely. We combine technical expertise,... ...Decisions is seeking a Security Automation Engineer to join our team supporting a...Contract workRemote work
- ...Security Automation Engineer serves as a technical authority in the platform, specializing in integrating and optimizing workflow automation solutions across customer enterprises. In this role, you will guide customers through scoping out automation Stories to suit...
- ...Design and develop normalization, enrichment, triage, and automated response workflows for security detection events. Design, operate, and improve SOAR... ...Requirements ~5+ years of professional software engineering experience with strong Python proficiency, including modular...Full time
- ...Job Description Job Description Foresite is seeking a highly motivated and passionate Security Automation Engineer with a strong foundation in cybersecurity and foundational Python skills to join our growing Professional Services team. In this client-facing role...Temporary workWork at office
$60 - $65 per hour
...MatchPoint Solutions is a fast-growing, young, energetic global IT-Engineering services company with clients across the US . We provide... ...updated resume. We look forward to hearing from you! Security Automation Engineer Remote Contract: 6 months Pay rtae...Contract workLocal areaRemote work
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to XSOAR Security Automation Engineer - W2 ONLY. Be the first to apply!
Related searches
- information technology security engineer United States
- information system security engineer United States
- aws cloud security engineer United States
- security project engineer United States
- offensive security engineer United States
- dlp security engineer United States
- lead security engineer United States
- cloud security engineer United States
- security operations engineer United States
- junior network security engineer United States






