Lead Security Automation Consultant – SOAR, Azure

🔥 13 hours ago

🇺🇸 United States – Remote

⏳ Contract/Temporary

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 11%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Trility Consulting

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

📦 Logistics

📣 Marketing

Consulting • Logistics • Marketing

Trility Consulting is a business-driven technology consulting firm focused on AI & Data, software design and development, cloud engineering, and DevOps. Known for its values of trust, partnership, and excellence, Trility offers a collaborative approach to tackle important business challenges with clarity and confidence. The company emphasizes continuous delivery and security by design, employing a proven, scalable methodology to achieve modern solutions. Recognized as Technology Company of the Year in Iowa, Trility is owned by its senior executives, ensuring investment and outcome-driven project management. With a focus on predictability, repeatability, and auditability, Trility serves clients across various industries, offering both full-stack solutions and strategic consulting expertise.

📋 Description

• Design, develop, and implement security automation workflows across defined client use cases • Build integrations between security platforms, ServiceNow, and other enterprise applications using REST APIs and Microsoft Graph • Develop and maintain Python-based Azure Functions • Build and work with KQL queries, particularly Microsoft Defender advanced hunting, to retrieve, filter, and analyze security data • Develop automated workflows using Tines or comparable security orchestration and automation platforms • Integrate security alerts, incident data, and case-handling processes with ServiceNow • Use Microsoft Entra ID for identity-related automation, including group membership changes and application registration credentials • Implement Azure DevOps pipelines to deploy Azure Functions and support controlled release processes • Follow client change-control and approval processes • Troubleshoot, test, and optimize automation workflows and integrations • Build reusable components, develop supporting runbooks, and lead knowledge-transfer sessions • Collaborate with client stakeholders to understand requirements and translate them into practical automation solutions

🎯 Requirements

• Must reside within the United States • Must be authorized to work in the United States without sponsorship now or in the future • Must be able to pass a background check • 5+ years of experience in security engineering, security automation, systems integration, or a related technical discipline • Hands-on experience designing and implementing security automation or workflow automation solutions • Strong Python development experience, including building and deploying Azure Functions • Experience writing and working with Kusto Query Language (KQL), particularly Microsoft Defender advanced hunting • Experience integrating ServiceNow with security platforms or other enterprise applications • Strong experience building and consuming REST APIs and developing application integrations • Experience with Microsoft Graph and Microsoft Entra ID, including automating group membership changes and working with application registration credentials • Experience implementing Azure DevOps pipelines to deploy Azure Functions • Experience working within structured change-control and approval processes • Experience with a security orchestration or workflow automation platform such as Tines, Torq, Swimlane, Splunk SOAR, Cortex XSOAR, or Microsoft Sentinel Playbooks/Azure Logic Apps • Ability to independently develop, troubleshoot, and deliver working automation solutions within a defined project timeline • Strong problem-solving, communication, documentation, and knowledge-sharing skills • Direct, hands-on experience with Tines (preferred) • Experience with Microsoft Sentinel and Sentinel playbooks (preferred) • Experience with Defender for Office 365 or Proofpoint email and click data (preferred) • Experience working with Tenable and Common Vulnerabilities and Exposures (CVE) data (preferred) • Experience integrating or working with Hunters security platform (preferred) • Familiarity with n8n, Power Automate, Workato, or other workflow automation platforms (preferred) • Experience building security triage, ticketing, and case-management workflows (preferred) • Experience working in a consulting or professional services environment (preferred)

🏖️ Benefits

• Work remotely anywhere in the United States with flexible work hours • Sponsored and supported learning opportunities • Great Place to Work® Certification culture • Short-term 1099 contract engagement

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume