Security Automation Engineer

TransUnion

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Chicago, ILReston, VACrum Lynne, PA
Salary
$112,500–$187,500 / yr
Employment
Full-time
Posted
57 days ago
Freshness
Confirmed live today

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $179k
This role $150k
$100k $227k
below market most similar roles pay here above market

This role pays less than 69% of similar roles. Most pay $144,750–$213,250 — the blue band above. At the midpoint, this role pays about $150k versus about $179k for comparable roles.

Based on 240 similar postings.

Employer

About TransUnion

TransUnion is a global information and insights company and one of the "Big Three" credit reporting agencies, alongside Equifax and Experian.

TransUnion currently has 11 open roles on FindRole.

Listed pay typically runs $112,500–$187,500 across 10 roles with salary data.

Most-posted roles

View all roles at TransUnion

At a glance

TL;DR · Security Automation Engineer

The Security Automation Engineer joins the SOAR Development team to design and deliver automation capabilities that strengthen Security Operations Center response and reduce manual effort for security analysts. This role involves leading the design, development, and maintenance of security response automations on an agentic AI SOC platform, including migrating existing Splunk SOAR playbooks. You will build end-to-end agentic workflows, including prompt design, tool integration, and guardrails for AI-driven triage. Key responsibilities include developing integrations across SIEM, EDR, and ITSM platforms using REST APIs, webhooks, and event-driven patterns. You will primarily use Python to build internal tools and services. Required skills include experience with Large Language Models like Anthropic Claude or OpenAI, Git-based development, CI/CD practices, and the MITRE ATT&CK framework to solve complex security operations problems.

What you'll do

  • Lead the design, development, and maintenance of security response automations on the agentic AI SOC platform.
  • Build end-to-end agentic workflows including prompt design, tool integration, guardrails, and human-in-the-loop reviews.
  • Develop and maintain integrations across SIEM, EDR, threat intelligence, and ITSM platforms using REST APIs and webhooks.
  • Build internal tools, services, and APIs primarily in Python to reduce repetitive work for security analysts.
  • Administer and improve the case management platform and its supporting workflows.
  • Convert new security detections into automated response workflows in partnership with detection engineering teams.
  • Contribute to shared engineering standards through Git-based development, code reviews, automated testing, and CI/CD practices.
  • Measure automation effectiveness through metrics like throughput, mean time to respond, and analyst time saved.

What we're looking for

  • 10+ years of experience in security engineering, security automation, or software engineering with a strong cybersecurity focus.
  • Hands-on experience with SOAR or security automation platforms such as Splunk SOAR, Cortex XSOAR, Tines, or Torq.
  • Experience building solutions with modern LLM platforms including agent design, prompt design, tool-use patterns, and model-output evaluation.
  • Working knowledge of Security Operations Center operations, incident response workflows, and the MITRE ATT&CK framework.
  • Strong production-level Python development experience.
  • Experience developing and integrating REST APIs, JSON-based services, webhooks, and event-driven solutions.
  • Experience with Git-based development, code review, automated testing, and Continuous Integration and Continuous Delivery practices.
  • Knowledge of authentication and secure integration patterns, including OAuth, API keys, and secrets management.

More like this

Similar roles

Senior Security Automation Engineer

Adobe

Lehi, UT +2 39 days ago $144,800–$261,450
Python Agentic AI SOAR REST APIs CI/CD Detection-as-Code Splunk SOAR Tines XSOAR Go PowerShell Bash Okta Entra ID EDR SIEM Context Engineering Copilot Cursor
7+ yrs exp

Security Platform Automation Engineer

Apple Inc

Seattle, WA 13 days ago $175,000–$308,500
Python Go Java LLM Agentic Workflows AWS S3 EC2 Lambda Step Functions SAST SCA SBOM Threat Modeling APIs Data Pipelines Observability
8+ yrs exp

Senior Security Automation Engineer, Security Operations Center

Fidelity Financial Services

Durham, NC 13 days ago
Python Endpoint Detection and Response Docker Kubernetes Amazon Web Services Microsoft Azure Infrastructure as Code Artificial Intelligence Large Language Models Network Protocols Forensic Analysis Front-end Development Systems Architecture
3+ yrs exp

SOAR Engineer, Senior

Booz Allen Hamilton

Scott AFB, IL 97 days ago
SOAR Python Tines Palo Alto XSOAR Splunk Phantom Swimlane Docker Kubernetes Podman APIs Linux ThreatQ OpenCTI Analyst1 Git Elastic Stack Splunk HTML JS CSS Zero Trust Architecture

Senior AI Security Automation Engineer

State Street

Quincy, MA +5 26 days ago
Generative AI LLM RAG Python Go Rust TypeScript JavaScript Bash PowerShell AWS Azure GCP LangChain LangGraph CrewAI AutoGen Semantic Kernel Databricks Snowflake Spark Kafka Delta Lake Iceberg Airflow Vector Databases CI/CD Jenkins Harness Spinnaker Argo CD MLOps LLMOps Serverless SIEM
7+ yrs exp Hybrid

Network Security Automation Engineer

Booz Allen Hamilton

McLean, VA 69 days ago
AWS Terraform Python TypeScript CloudFormation AWS CDK Palo Alto VM-Series CI/CD Ansible Bash PowerShell VPC Transit Gateway Gateway Load Balancer AWS Network Firewall Git Wireshark Elastic Splunk VPN
5+ yrs exp