Senior Security Automation Engineer

Job Location

Job Description

Information Technology (IT) at Procter & Gamble is where business, innovation and technology integrate to create a competitive advantage for P&G. Our mission is clear -- we deliver IT to help P&G win with the over 5 billion consumers we serve worldwide. Our IT professionals are diverse business leaders who apply IT mastery to deliver game-changing, technology-driven business models and capabilities for our 65 iconic, trusted brands.

From Day 1, you’ll be trusted to dive right in, take the lead, use your initiative, and build billion-dollar brands that help make everyday activities easier and make the world a better place. You’ll be doing meaningful work that takes your career places you never imagined. And you’ll do this in creative workspaces where new ideas flourish and where your technical mastery is recognized and rewarded.

The Opportunity

Procter & Gamble is seeking an experienced SOAR Engineer to join our engineering organization. In this role, you will collaborate with various stakeholders to understand business requirements and strategize the utilization of automation for enhanced efficiency. Working closely with the Security Operations Center (SOC) team and Incident Response Team (IRT), you will assist in the implementation and management of SOAR technologies.

As a Security Orchestration, Automation, and Response (SOAR) Engineer, you will serve a critical role in our InfoSec's Cyber Defense Technology team. You will focus on enhancing our organization's automation, orchestration, and response capabilities through the strategic use of SOAR technology. You will lead the implementation of our SOAR platform, aiming to boost our overall efficiency and effectiveness in Global Cyber Defense.

Position Responsibilities

• Cooperate with the SOC and broader Global Cyber Defense teams to enhance existing automation and deliver robust security solutions.

• Evaluate, design, and upgrade SOC processes and workflows, focusing on integrating automation through SOAR tools and technologies.

• Initiate new SOC automation, ensuring compatibility with existing detection and response tools.

• Integrate new log sources and develop playbooks to efficiently triage and respond to security incidents while minimizing analysis time.

• Design custom scripts to automate existing detection and response workflows.

• Assess SOC alerts statistics and workflows to minimize false positives and accurately direct engineering efforts.

• Create pipelines to enrich logs and alert results, providing a comprehensive view for SOC analysts.

• Operate and mature a SOC playbook, workflow automations, and use cases.

• Engage with stakeholders to identify business requirements and provide recommendations on leveraging data effectively.

The Ideal Candidate

• Is passionate about cyber security and improving infrastructure for the future.

• Can work independently and as a team to gather requirements and translate into solutions.

• Is detail-oriented and analytical in nature, with strong problem-solving skills.

• Has the ability to multitask and prioritize, work on multiple projects and manage time effectively.

• Can produce and present technical information to both technical and non-technical personnel.

• Can provide customer-facing support in a professional manner.

Job Qualifications

Required:

• Bachelor's Degree in Information Systems, Information Technology (IT), Computer Science, Software Engineering, other STEM field or 5+ years relevant years of experience/education

• Comprehensive knowledge of both classic and emerging threat actor tactics, techniques, and procedures in pre- and post-exploitation phases of attack lifecycles.

• Proven experience in using Python for automating security operations and incident response processes.

• Familiarity with working with AI tools.

• Strong understanding of security architecture, tool integration, API development, and automation.

• Extensive knowledge of Incident Response processes.

• Familiarity with common SOC and SOAR processes and workflows.

• Rich background and experience in Security Information and Event Management (SIEM) systems.

• Experience with security-related datasets, log formats, and protocols.

• Ability to work onsite in Cincinnati, Ohio on a hybrid work schedule.

Preferred:

• Certifications: CISSP, CCSP, OSCP, AWS Certified Solutions Architect (Amazon Web Services), AWS Certified Developer, Relevant certifications in ML/AI

Compensation for roles at P&G varies depending on a wide array of non-discriminatory factors including but not limited to the specific office location, role, degree/credentials, relevant skill set, and level of relevant experience. At P&G compensation decisions are dependent on the facts and circumstances of each case. Total rewards at P&G include salary + bonus (if applicable) + benefits. Your recruiter may be able to share more about our total rewards offerings and the specific salary range for the relevant location(s) during the hiring process.

We are committed to providing equal opportunities in employment. We value diversity and do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Immigration Sponsorship is not available for this role. For more information regarding who is eligible for hire at P&G along with other work authorization FAQ’s, please click  .

Procter & Gamble participates in e-verify as required by law.

Qualified individuals will not be disadvantaged based on being unemployed.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Job Schedule

Job Number

Job Segmentation

Starting Pay / Salary Range