Senior Engineer, Information Security

What you'll do

• Design and maintain automated security playbooks and workflows using SOAR platforms like Torq.
• Develop AI-assisted workflows and integrate Large Language Models into security processes.
• Create custom scripts and REST API integrations to connect disparate security tools and enterprise systems.
• Identify and automate manual, repetitive security tasks to improve analyst efficiency.
• Apply software development best practices including version control, testing, and code review to security operations.
• Consult on security requirements and provide recommendations for new system implementations and projects.
• Resolve security-related tasks from the ticketing queue and provide Tier 3 support for SOC alerts.
• Document standards and operating procedures for automation architecture and security requirements.

What we're looking for

• 5+ years of experience in security engineering or software development.
• Proven experience with SOAR platforms such as Torq, Splunk SOAR/Phantom, Cortex XSOAR, or Swimlane.
• Strong proficiency in scripting and software development languages like Python for API integration and data processing.
• Experience designing AI-driven automation or integrating AI/LLM capabilities into operational workflows.
• Deep understanding of RESTful APIs and experience integrating various security tools like SIEM, EDR, and Firewalls.
• Experience working in a Security Operations Center (SOC) and understanding Incident Response lifecycles.
• Technical proficiency in the MITRE ATT&CK framework and strong understanding of current attack vectors.
• Proven experience in securing a complex, diverse, distributed technology footprint.