SOAR and AI Engineer – Managed Security

Job not on LinkedIn

🕒 August 5

🇺🇸 United States – Remote

💵 $120k - $160k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

🤖 AI Engineer

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

AHEAD

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💼 Consulting

🤖 Artificial Intelligence

🏢 Enterprise

💰 $5.7M Venture Round - AHEAD on 2024-05

Consulting • Artificial Intelligence • Enterprise

AHEAD is a technology consulting and systems-integration firm that accelerates digital transformation by engineering integrated solutions across infrastructure, applications, data, and security. The company specializes in AI transformation and AI-enabled infrastructure, data platform and platform/workload modernization, secure and resilient architectures, operational excellence, and managed services including IT lifecycle and procurement (AHEAD Hatch) and hardware integration (AHEAD Foundry). AHEAD delivers end-to-end services from strategy and financial consulting to build and run operations, partners with major cloud and infrastructure vendors (AWS, Google Cloud, Microsoft, Cisco, Dell, VMware, NVIDIA, ServiceNow, Palo Alto Networks, Rubrik, etc. ), and serves enterprise clients across industries such as healthcare, financial services, manufacturing, retail, and public sector.

📋 Description

• Design, develop, and maintain scalable, reliable, and auditable SOAR security automation workflows • Build and maintain playbooks for alert triage, enrichment, containment, escalation, evidence gathering, and case management • Partner with SOC analysts, SIEM engineers, threat detection engineers, and incident responders to convert repeatable processes into automation • Integrate SOAR, SIEM, ticketing, collaboration, endpoint, identity, firewall, threat intelligence, and cloud security tools • Apply and operationalize AI and machine learning for alert summarization, triage recommendations, investigation support, knowledge retrieval, workflow decisioning, and reporting • Establish guardrails, quality controls, and validation for AI-enabled workflows • Engage client security and IT infrastructure teams for automation integration and onboarding • Create Python or similar-language tooling and scripts for operational automation, integrations, data normalization, and platform functionality • Monitor and optimize automation platform health, performance, reliability, workflow success rates, and analyst touchpoints • Build dashboards, reports, and metrics for automation adoption, workflow effectiveness, case throughput, response-time improvements, and platform health • Participate in client-facing security meetings and contribute to the Managed Security automation and AI roadmap

🎯 Requirements

• Strong experience with SOAR platforms, preferably Swimlane and Palo Alto XSOAR, including playbook/workflow development, integrations, and operational support • Strong experience with security automation, orchestration, and systems integration in enterprise or managed security environments • Experience writing automation and integration tools in Python or other languages • Experience with APIs, webhooks, JSON, authentication methods, and event-driven integrations • Experience with SIEM platforms and common security operations workflows • Familiarity with AI-assisted operations, LLM-enabled workflow patterns, or practical AI uses in security operations • Incident handling and response experience • 2–4 years of experience in Information Security, Incident Response, SOAR engineering, security automation, detection engineering, or related disciplines • Hands-on experience with IDS, firewalls, SIEM, SOAR, EDR, IAM, email security, and cloud security tools • Knowledge of security analysis tools and techniques • Understanding of security threats, attack vectors, vulnerabilities, and exploits • Knowledge of regular expressions and data transformation concepts • Ability to work in a highly sensitive and confidential environment • Ability to meet deadlines and handle sensitive and pressured situations • Bachelor’s Degree in Computer Science, Information Security, Engineering, or related field, or equivalent educational or work experience • Preferred: experience with Swimlane, Palo Alto XSOAR, Elastic, AWS, Azure, GCP, ServiceNow, collaboration tooling, case management systems, and production AI governance

🏖️ Benefits

• Medical, Dental, and Vision Insurance • 401(k) • Paid company holidays • Paid time off • Paid parental and caregiver leave • Cross-department training and development • Sponsorship of certifications and credentials for continued learning • Diversity and employee groups including Moving Women AHEAD and RISE AHEAD • AI application and interview recording opt-out without penalty