Quick overview
Job description
Description of Task to be Performed:
The Security Automation (SOAR) Engineer will build, optimize, and scale our automated incident response workflows. You will bridge security operations and software engineering, using modern low-code/pro-code tools and AI to cut response times and strengthen our threat posture.
Core Responsibilities:
- Playbook Automation: Design, build, and maintain end-to-end incident response playbooks within our SOAR platform.
- Workflow Logic: Write custom automation logic using a mix of low-code tools and pro-code scripting.
- Integrations: Connect disparate security tools via REST APIs, webhooks, and event-driven architecture.
- Incident Response: Partner with the SOC team to translate manual triage steps into reliable, automated actions.
- AI Integration: Leverage frontier LLMs (such as ChatGPT, Grok, Claude Code, or Codex) to enhance automation intelligence and code generation.
Primary Languages & Technical Stack
- Query & Data: SQL and GraphQL.
- Scripting & Development: Proficiency in Python, JavaScript, or TypeScript (at least one required)
Required Qualifications:
- Clearance: Active TS/SCI Clearance with CI Polygraph
- Education & Years of Experience: Bachelor’s degree and 8 years of experience related to specific functional area.
- Certifications: Active certifications for both IAT Level II (e.g. CompTIA Security+) and Cyber Security Service Provider (CSSP) Infrastructure Support (e.g. CompTIA Cloud+) by program onboarding date.
- The following individual certifications cover both certification requirements for this program: CompTIA Cybersecurity Analyst, CySA+; EC-Council Certified Network Defender (CND); GlAC Global Industrial Cyber Security Professional, GICSP; (ISC)2 System Security Certified Practitioner (SCCP).
- Hands-on experience and knowledge with the following:
- SOAR Playbook Automation: Proven experience building security orchestration and automated response workflows.
- Workflow Logic: Strong grasp of both low-code interface design and pro-code logic handling.
- API & Architectures: Deep hands-on experience with REST API integration, webhook management, and event-driven systems.
- Incident Response: Understanding of core security incidents, triage procedures, and playbook design patterns.
- Frontier LLMs: Familiarity with AI coding tools and LLMs (ChatGPT, Grok, Claude, Claude Code, Codex) is a strong plus.
Preferred Qualifications:
- Extensive experience with SOAR Playbook Automation
- Multiple scripting and development languages
- Deep understanding of incident response playbook design
- Generous cost sharing for medical insurance for the employee and dependents
- 100% company paid dental insurance for employees and dependents
- 100% company paid long-term and short-term disability insurance
- 100% company paid vision insurance for employees and dependents
- 401k plan with generous match and 100% immediate vesting
- Competitive Pay
- Generous paid leave and holiday package
- Tuition and training reimbursement
- Life and AD&D Insurance
Haystack's AI agent can fill in and submit this application for you. How AI auto apply works
Similar jobs
- TE

IT Information Security ManagerRecently posted Auto Apply
TerraPower LLC. · Bellevue · Hybrid · Posted 13 Nov 2026 🇺🇸
ComplianceProcurement$157.2k - $209.7k/yr - OK

Director, Product Security, PSIRTRecently posted Auto Apply
Okta · Bellevue · Hybrid · Posted 13 Nov 2026 🇺🇸
RecruitingStakeholder ManagementOnboarding+5$251k/yr - NE

Principal Security EngineerRecently posted Auto Apply
NetDocuments · Lehi · Hybrid · Posted 12 Nov 2026 🇺🇸
AWSSOC 2Compliance+4Technology$200k - $220k/yr - MS

Security Engineering Intern (Summer 2027)Recently posted Auto Apply
Muon Space · Mountain View · Hybrid · Posted 12 Nov 2026 🇺🇸
GCPMicrosoft OfficeGoogle Workspace+9$40/hr - CA

Security EngineerRecently posted Auto Apply
Cartesia · *HQ - San Francisco · On-site · Posted 12 Nov 2026 🇺🇸
GCPAWSCompliance+9TechnologySalary not listed - TM
Chief Information Security Officer (CISO), RFARecently posted Auto Apply
Titan Msp · Remote (US) · Hybrid · Posted 13 Nov 2026 🇺🇸
Microsoft OfficeSOC 2Compliance+2AdministrativeSalary not listed - FU
Senior Corporate Security EngineerRecently posted Auto Apply
Funxyz · New York · Hybrid · Posted 12 Nov 2026 🇺🇸
OnboardingGoogle WorkspaceEncryption+13Technology$140k - $200k/yr - TT
Senior Security EngineerRecently posted Auto Apply
True Talent Solutions Partners · San Francisco · On-site · Posted 13 Nov 2026 🇺🇸
GCPAWSSOC 2+7Technology$190k - $250k/yr - AP
Director, Cyber Architecture & EngineeringRecently posted Auto Apply
Alnylam Pharmaceuticals · Cambridge · Hybrid · Posted 10 Nov 2026 🇺🇸
Zero TrustIAMTechnology$199.8k/yr - AP
Cyber Defense Principal EngineerRecently posted Auto Apply
Alnylam Pharmaceuticals · Cambridge · Hybrid · Posted 10 Nov 2026 🇺🇸
CompliancePythonTechnology$199.8k/yr - AP
Associate Director, Cyber Defense - Staff Incident ResponderRecently posted Auto Apply
Alnylam Pharmaceuticals · Cambridge · Hybrid · Posted 10 Nov 2026 🇺🇸
BashPowerShellPythonTechnology$174.3k/yr - AP
Associate Director, Identity & Access Management ArchitectRecently posted Auto Apply
Alnylam Pharmaceuticals · Cambridge · Hybrid · Posted 10 Nov 2026 🇺🇸
OnboardingMFAOAuth+10$176.8k/yr
