Principal Security Engineer – Orchestration and Automation

🕒 September 4

🇺🇸 United States – Remote

💵 $117.2k - $157.5k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 6%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Blackbaud

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

☁️ SaaS

🤝 Non-profit

🤝 B2B

💰 $6.5M Series A on 2000-02

SaaS • Non-profit • B2B

Blackbaud is a cloud software company that builds intelligent solutions for social impact, focusing on nonprofit organizations. It provides products and services for fundraising, donor management, engagement, and sector-specific cloud solutions to help charities, educational institutions, and other mission-driven organizations move faster and work smarter. Blackbaud also offers training, support, developer resources, a partner marketplace, and industry research through the Blackbaud Institute. The company emphasizes privacy, security, and corporate social responsibility.

📋 Description

• Design, build, and maintain orchestration workflows and SOAR playbooks automating triage, enrichment, containment, and response across the security tool stack • Apply AI/ML and LLM-assisted techniques to automate alert summarization, investigation assistance, and anomaly scoring • Develop and maintain Python-based integrations and APIs connecting SIEM, SOAR, EDR, ticketing, threat intelligence, and cloud platforms • Design, build, and tune SIEM correlation rules, alerts, and MITRE ATT&CK-mapped detection use cases • Perform SIEM administration, including data source onboarding, index/data model health, log ingestion monitoring, and configuration management • Build and maintain custom field extractions, parsers, and content packs • Tune detections and automation logic to improve signal-to-noise ratio, reduce false positives, and reduce MTTR • Create dashboards and reporting measuring automation coverage, orchestration reliability, AI-assisted triage accuracy, and detection effectiveness • Apply CI/CD and infrastructure-as-code practices to manage detection content, playbooks, and integrations as versioned, testable code • Evaluate and pilot new automation, orchestration, and AI tooling • Partner closely with Security Operations and the Detection Engineering Lead

🎯 Requirements

• 5+ years building automation, orchestration, or SOAR playbooks in a cyber security or SOC environment • 3+ years of SIEM engineering or administration experience, including data onboarding, correlation rule development, and platform configuration • Strong Python or comparable scripting skills • Experience building APIs and integrations across security and IT tooling • Hands-on experience with AI/ML or LLM-based tooling applied to security use cases such as triage, summarization, enrichment, and/or anomaly detection • Working knowledge of MITRE ATT&CK and experience mapping detections/automation to adversary tactics and techniques • Experience with a SOAR or security orchestration platform • Cloud security experience with AWS, Azure, or GCP, including automation for ingesting and processing security data from cloud sources • Experience with CI/CD, infrastructure-as-code, and version-controlling detection/automation content • Familiarity with containerized and serverless environments and their automation/logging considerations • SIEM, SOAR, or security automation platform certification preferred • Regulatory compliance experience a plus

🏖️ Benefits

• Medical, dental, and vision insurance • Remote-flexible workforce • Wellness Programs • 401(k) program with employer match • Flexible paid time off • Generous Parental Leave • Donations for Doers • Pet insurance, legal and identity protection • Tuition reimbursement program