Security Automation Engineer

🕒 June 3

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ProArch

WebsiteLinkedInAll Job Openings

201 - 500 employees

🤖 Artificial Intelligence

🔒 Cybersecurity

Artificial Intelligence • Cybersecurity • Cloud

ProArch is a technology company that specializes in providing digital engineering, cloud services, data and AI solutions, and cybersecurity measures. They help businesses unleash their full potential by modernizing operations, protecting assets, and delivering data-driven insights. ProArch works closely with clients to eliminate roadblocks to growth and aligns advanced technology solutions with business goals to empower organizational success. As an award-winning Microsoft Gold Partner, they offer a wide range of services including AI consulting, software development, quality assurance, infrastructure management, governance, risk, and compliance solutions, and operational technology services. Their expertise extends to industries such as credit unions, power generation, and manufacturing, providing tailored solutions to meet each sector's unique challenges.

📋 Description

• ProArch IT Solutions is seeking a highly motivated and technically skilled Security / SOAR Automation Engineer to join our global cybersecurity operations team. • The ideal candidate will possess strong hands-on experience in cybersecurity automation, SOAR platform engineering, SOC workflow orchestration, and security integrations across modern security ecosystems. • This role is heavily focused on designing, implementing, optimizing, and scaling SOC automation capabilities to improve operational efficiency, incident response, alert enrichment, triage automation, threat intelligence utilization, and AI-driven security operations enhancements. • The Engineer will work closely with SOC Operations, Security Engineering, Security Consulting, and Leadership teams to deliver automation initiatives and operational improvements while supporting a globally distributed security environment. • SOAR Engineering & Automation: Design, develop, implement, and maintain SOAR playbooks and automation workflows for SOC operations. • Build scalable security orchestration workflows for alert triage, automated enrichment, threat intelligence correlation, incident response, containment workflows, identity-based investigations, case management, reporting automation. • Implement and maintain integrations between SOAR platforms and various security technologies using APIs, webhooks, SDKs, and custom connectors. • Develop automation logic to improve SOC efficiency, reduce analyst fatigue, and accelerate Mean Time to Respond (MTTR) and Mean Time to Resolve. • Assist with SOAR platform lifecycle management including upgrades, change management, testing, governance, RBAC, and operational maintenance. • Assist with SOAR platform administration, identity & access management, and environment hardening. • Security Platform Integrations: Hands-on experience integrating and automating workflows involving various security technologies such as Microsoft Defender, CrowdStrike Falcon, SIEM platforms, etc. • Work collaboratively with SOC Managers, SOC Team Leads, Analysts, and Security Consultants to identify automation opportunities.

🎯 Requirements

• Bachelor’s Degree / Graduation in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical field is mandatory. • Relevant cybersecurity certifications and automation-focused certifications will be considered an added advantage. • 3–5 years of overall cybersecurity experience. • Proven hands-on experience with SOAR platforms in enterprise or MSSP environments. • Strong experience designing and implementing automation workflows from scratch. • Experience supporting Security Operations Center (SOC) environments. • Prior SOC Analyst experience is highly preferred. • Experience working within Managed Security Services Provider (MSSP) environments preferred. • Experience supporting or collaborating with US-based teams/vendors preferred. • Strong hands-on experience with SOAR technologies. • Experience with Torq SOAR preferred. • Strong understanding of incident response workflows, SOC operations, detection engineering, security orchestration, threat intelligence, API integrations, authentication mechanisms, identity-based security workflows, and experience integrating security tools using REST APIs, JSON, Webhooks, Python, PowerShell, scripting/automation frameworks. • Familiarity with SIEM platforms and alert correlation logic. • Experience with ticketing systems, preferably Datto Autotask. • Understanding endpoints, cloud, identity, and email security ecosystems.