Engineering

Castillians

SOAR Engineer responsible for developing automated security response workflows. Collaborating with cybersecurity teams to enhance cyber defense capabilities through automation.

Posted 7/13/2026contractRemote • 🇮🇪 IrelandMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and developing SOAR playbooks for automating security incident detection and response, with strong skills in scripting languages such as Python, PowerShell, and Bash. Proven ability to integrate SOAR platforms with ITSM solutions and security tools while ensuring compliance with security policies.

Highest-signal resume keywords

SOAR Platform ManagementAutomation Playbook DevelopmentREST API IntegrationScripting (Python, PowerShell, Bash)SOC Operations Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SOAR Playbook DesignAutomation Workflow DevelopmentAPI IntegrationFirewall Rule UpdatesActive Directory User Account DisablementEndpoint IsolationPCAP ExtractionMemory Dump AcquisitionIncident Response AutomationTroubleshooting Automation Workflows

Soft Skills

Analytical SkillsTroubleshooting SkillsCommunication Skills

Tools & Technologies

ITSM SolutionsSIEM PlatformsSecurity ToolsEnterprise Applications

Industry Keywords

CybersecurityInformation TechnologySecurity Incident DetectionIncident Response ProcessesGovernance Requirements

Tech Stack

Tools & technologies

Cyber SecurityITSMPython

About the role

Key responsibilities & impact

Design, develop, test, and maintain SOAR playbooks to automate security incident detection, investigation, and response.
Integrate the SOAR platform with ITSM solutions, SIEM platforms, security tools, and enterprise applications using APIs and connectors.
Develop scripts and automation workflows using supported scripting languages (e.g., Python, PowerShell, Bash).
Implement and orchestrate automated response actions, including: Firewall rule updates and IP blocking, Active Directory (AD) user account disablement, Endpoint isolation and quarantine, Packet capture (PCAP) extraction, Memory dump acquisition for forensic analysis.
Develop API integrations with internal and third-party security solutions.
Collaborate with SOC analysts and incident responders to automate repetitive security operations and improve incident handling processes.
Troubleshoot and optimize automation workflows to ensure reliability, efficiency, and accuracy.
Document playbooks, integration procedures, automation workflows, and operational runbooks.
Ensure automation activities comply with organizational security policies and governance requirements.
Participate in continuous improvement initiatives to expand automation coverage and enhance SOC maturity.

Requirements

What you’ll need

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field.
Proven experience implementing and managing SOAR platforms.
Strong expertise in developing automation playbooks and security workflows.
Hands-on experience with REST APIs, scripting (Python, PowerShell, Bash), and system integrations.
Experience integrating SOAR with ITSM platforms and security tools.
Knowledge of SOC operations and incident response processes.
Experience automating actions such as firewall blocking, Active Directory account disablement, endpoint quarantine, PCAP extraction, and memory dump collection.
Strong analytical, troubleshooting, and communication skills.

Benefits

Comp & perks

Clear scope with no ambiguity over deliverables.
Opportunity for repeat engagements based on performance.