Security Automation Engineer

ProArch

Security Automation Engineer responsible for designing and implementing SOAR automation workflows. Working within ProArch's cybersecurity operations team to improve security efficiency and incident response.

Posted 5/27/2026full-timeRemote • 🇮🇳 IndiaMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

CloudCyber SecurityPythonSplunk

About the role

Key responsibilities & impact

SOAR Engineering & Automation
Design, develop, implement, and maintain SOAR playbooks and automation workflows for SOC operations.
Build scalable security orchestration workflows for:
Alert triage
Automated enrichment
Threat intelligence correlation
Incident response
Containment workflows
Identity-based investigations
Case management
Reporting automation
Reporting automation
Implement and maintain integrations between SOAR platforms and various security technologies using APIs, webhooks, SDKs, and custom connectors.
Develop automation logic to improve SOC efficiency, reduce analyst fatigue, and accelerate Mean Time to Respond (MTTR) and Mean Time to Resolve.
Support SOAR platform lifecycle management including upgrades, change management, testing, governance, RBAC, and operational maintenance.
Assist with SOAR platform administration, identity & access management, and environment hardening.
Hands-on experience integrating and automating workflows involving:
Microsoft Defender for Endpoint (MDE)
Microsoft Defender XDR
Microsoft Defender for Identity (MDI)
Microsoft Defender for Office 365 (MDO)
Microsoft Defender for Cloud Apps (MDCA)
Microsoft Purview
Microsoft Identity Protection / Entra ID
CrowdStrike Falcon
Threat Intelligence platforms
(Must have) SIEM platforms (Microsoft Sentinel & Defender XDR)
Graph API
Ticketing platforms (Datto Autotask preferred)
Email security solutions
Endpoint detection & response platforms
Identity and authentication platforms
Cloud security solutions
Work collaboratively with SOC Managers, SOC Team Leads, Analysts, and Security Consultants to identify automation opportunities.
Create operational enhancements to improve detection engineering, investigation workflows, escalation efficiency, and reporting.
Assist with scaling SOC operations using automation and AI-driven initiatives.
Support operational maturity improvements within the SOC environment.
Participate in incident response automation strategy discussions and implementation planning.
Contribute to SOC transformation initiatives focused on operational scalability and service optimization.
Contribute to AI-enabled SOC initiatives and intelligent automation projects.
Assist in implementing AI orchestration and automation use cases within security operations.
Research and evaluate emerging AI and automation technologies relevant to cybersecurity operations.
Support initiatives focused on autonomous investigation workflows, enrichment intelligence, and analyst assistance capabilities.
Coordinate automation initiatives with internal stakeholders and external vendors.
Work closely with SOAR vendors for implementation support, troubleshooting, optimization, and feature enablement.
Participate in project planning, implementation tracking, testing, and deployment activities.
Maintain technical documentation, workflow diagrams, integration references, and operational runbooks.
Support cross-functional cybersecurity projects and operational improvements

Requirements

What you’ll need

Bachelor’s Degree / Graduation in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical field is mandatory.
Relevant cybersecurity certifications and automation-focused certifications will be considered an added advantage.
3–5 years of overall cybersecurity experience.
Proven hands-on experience with SOAR platforms in enterprise or MSSP environments.
Strong experience designing and implementing automation workflows from scratch.
Experience supporting Security Operations Center (SOC) environments.
Prior SOC Analyst experience is highly preferred.
Experience working within Managed Security Services Provider (MSSP) environments preferred.
Experience supporting or collaborating with US-based teams/vendors preferred.
Strong hands-on experience with SOAR technologies.
Experience with Torq SOAR preferred.
Strong understanding of:
Incident response workflows
SOC operations
Detection engineering
Security orchestration
Threat intelligence
API integrations
Authentication mechanisms
Identity-based security workflows
Experience integrating security tools using:
REST APIs
JSON
Webhooks
Python
PowerShell
Scripting/automation frameworks
Familiarity with SIEM platforms and alert correlation logic.
Experience with ticketing systems, preferably Datto Autotask.
Understanding endpoints, cloud, identity, and email security ecosystems.
Experience implementing AI-driven SOC workflows.
Exposure to AI orchestration in cybersecurity operations.
Knowledge of security operations metrics and optimization strategies.
Experience with security automation governance and change management.
Exposure to cloud security platforms and SaaS security controls.
Familiarity with DevSecOps or infrastructure automation concepts.
Relevant cybersecurity certifications are advantageous like Security+, CySA+, GCIH, SC-200, AZ-500, SOAR platform certifications, Splunk / Microsoft certifications.

Benefits

Comp & perks

🌐 Worldwide ❌ Jobs You've Hidden ⭐️ Saved Jobs ✅ Applied Jobs ✉️ Email Alerts 👤 Account ProArch Website LinkedIn All Job Openings 201 - 500 employees 🤖 Artificial Intelligence 🔒 Cybersecurity Artificial Intelligence
Cybersecurity
Cloud ProArch is a technology company that specializes in providing digital engineering, cloud services, data and AI solutions, and cybersecurity measures. They help businesses unleash their full potential by modernizing operations, protecting assets, and delivering data-driven insights. ProArch works closely with clients to eliminate roadblocks to growth and aligns advanced technology solutions with business goals to empower organizational success. As an award-winning Microsoft Gold Partner, they offer a wide range of services including AI consulting, software development, quality assurance, infrastructure management, governance, risk, and compliance solutions, and operational technology services. Their expertise extends to industries such as credit unions, power generation, and manufacturing, providing tailored solutions to meet each sector's unique challenges. Security Automation Engineer 🔥 42 minutes ago 🇮🇳 India – Remote ⏰ Full Time 🟡 Mid-level 🟠 Senior 🤖 QA Automation Engineer Cloud Cyber Security Python Splunk Apply Now Find Hiring Managers Customize resume + cover letter Report problem ☆ Save ☑️ Mark as applied ❌ Hide 📋 Description
SOAR Engineering & Automation
Design, develop, implement, and maintain SOAR playbooks and automation workflows for SOC operations.
Build scalable security orchestration workflows for:
Alert triage
Automated enrichment
Threat intelligence correlation
Incident response
Containment workflows
Identity-based investigations
Case management
Reporting automation
Reporting automation
Implement and maintain integrations between SOAR platforms and various security technologies using APIs, webhooks, SDKs, and custom connectors.
Develop automation logic to improve SOC efficiency, reduce analyst fatigue, and accelerate Mean Time to Respond (MTTR) and Mean Time to Resolve.
Support SOAR platform lifecycle management including upgrades, change management, testing, governance, RBAC, and operational maintenance.
Assist with SOAR platform administration, identity & access management, and environment hardening.
Hands-on experience integrating and automating workflows involving:
Microsoft Defender for Endpoint (MDE)
Microsoft Defender XDR
Microsoft Defender for Identity (MDI)
Microsoft Defender for Office 365 (MDO)
Microsoft Defender for Cloud Apps (MDCA)
Microsoft Purview
Microsoft Identity Protection / Entra ID
CrowdStrike Falcon
Threat Intelligence platforms
(Must have) SIEM platforms (Microsoft Sentinel & Defender XDR)
Graph API
Ticketing platforms (Datto Autotask preferred)
Email security solutions
Endpoint detection & response platforms
Identity and authentication platforms
Cloud security solutions
Work collaboratively with SOC Managers, SOC Team Leads, Analysts, and Security Consultants to identify automation opportunities.
Create operational enhancements to improve detection engineering, investigation workflows, escalation efficiency, and reporting.
Assist with scaling SOC operations using automation and AI-driven initiatives.
Support operational maturity improvements within the SOC environment.
Participate in incident response automation strategy discussions and implementation planning.
Contribute to SOC transformation initiatives focused on operational scalability and service optimization.
Contribute to AI-enabled SOC initiatives and intelligent automation projects.
Assist in implementing AI orchestration and automation use cases within security operations.
Research and evaluate emerging AI and automation technologies relevant to cybersecurity operations.
Support initiatives focused on autonomous investigation workflows, enrichment intelligence, and analyst assistance capabilities.
Coordinate automation initiatives with internal stakeholders and external vendors.
Work closely with SOAR vendors for implementation support, troubleshooting, optimization, and feature enablement.
Participate in project planning, implementation tracking, testing, and deployment activities.
Maintain technical documentation, workflow diagrams, integration references, and operational runbooks.
Support cross-functional cybersecurity projects and operational improvements 🎯 Requirements
Bachelor’s Degree / Graduation in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical field is mandatory.
Relevant cybersecurity certifications and automation-focused certifications will be considered an added advantage.
3–5 years of overall cybersecurity experience.
Proven hands-on experience with SOAR platforms in enterprise or MSSP environments.
Strong experience designing and implementing automation workflows from scratch.
Experience supporting Security Operations Center (SOC) environments.
Prior SOC Analyst experience is highly preferred.
Experience working within Managed Security Services Provider (MSSP) environments preferred.
Experience supporting or collaborating with US-based teams/vendors preferred.
Strong hands-on experience with SOAR technologies.
Experience with Torq SOAR preferred.
Strong understanding of:
Incident response workflows
SOC operations
Detection engineering
Security orchestration
Threat intelligence
API integrations
Authentication mechanisms
Identity-based security workflows
Experience integrating security tools using:
REST APIs
JSON
Webhooks
Python
PowerShell
Scripting/automation frameworks
Familiarity with SIEM platforms and alert correlation logic.
Experience with ticketing systems, preferably Datto Autotask.
Understanding endpoints, cloud, identity, and email security ecosystems.
Experience implementing AI-driven SOC workflows.
Exposure to AI orchestration in cybersecurity operations.
Knowledge of security operations metrics and optimization strategies.
Experience with security automation governance and change management.
Exposure to cloud security platforms and SaaS security controls.
Familiarity with DevSecOps or infrastructure automation concepts.
Relevant cybersecurity certifications are advantageous like Security+, CySA+, GCIH, SC-200, AZ-500, SOAR platform certifications, Splunk / Microsoft certifications. Apply Now 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score Similar Jobs Senior ML & Automation Engineer 🕒 5 days ago Dodge Construction Network 501 - 1000 🤝 B2B ☁️ SaaS 🏪 Marketplace Website LinkedIn All Job Openings Senior ML & Automation Engineer designing and operating AI-driven pipelines for data acquisition and validation at Dodge Construction Network. Collaborating with Data Engineering and Operations for scalable solutions. 🇮🇳 India – Remote ⏰ Full Time 🟠 Senior 🤖 QA Automation Engineer Amazon Redshift AWS ETL Microservices Python PyTorch Scikit-Learn SQL Tensorflow UiPath Automation Developer 🕒 May 20 PAteam 51 - 200 🤖 Artificial Intelligence ☁️ SaaS 🏢 Enterprise Website LinkedIn All Job Openings UiPath Automation Developer designing, developing, and deploying automation solutions for production at PAteam. Collaborating with IT teams and mentoring junior developers in a fully remote setting. 🇮🇳 India – Remote ⏰ Full Time 🟡 Mid-level 🟠 Senior 🤖 QA Automation Engineer .NET Python Automation Engineer 🕒 May 20 Miratech 501 - 1000 Website LinkedIn All Job Openings Python Automation Engineer supporting automation and API integration in a global IT services company. Collaborating with teams on modernization initiatives and cloud-based environment migration. 🇮🇳 India – Remote 💰 Private Equity Round on 2022-04 ⏰ Full Time 🟡 Mid-level 🟠 Senior 🤖 QA Automation Engineer AWS Azure Cloud Django Flask JavaScript Linux Pandas Postgres Python Tableau Automation Engineer 🕒 May 20 Altisource 1001 - 5000 🏠 Real Estate 💸 Finance 💳 Fintech Website LinkedIn All Job Openings QA Engineer responsible for quality assurance of web and API applications. Involves manual and automation testing in an Agile environment. 🇮🇳 India – Remote ⏰ Full Time 🟢 Junior 🟡 Mid-level 🤖 QA Automation Engineer Cypress Java JavaScript Jenkins Python SDLC Selenium SQL Voice Test Automation Engineer 🕒 May 19 Calix 1001 - 5000 📡 Telecommunications ☁️ SaaS 🏢 Enterprise Website LinkedIn All Job Openings Automation Voice Test Engineer executing testing of voice protocols on Calix platforms. Collaborating with development teams to ensure high-quality releases and continuous process improvement. 🇮🇳 India – Remote 💰 $50M Venture Round on 2009-08 ⏰ Full Time 🟠 Senior 🔴 Lead 🤖 QA Automation Engineer Python View More QA Automation Engineer Jobs 🌐 Worldwide Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com Search Search Jobs by country Search jobs by city Search jobs by job title Search entry-level jobs Search junior-level jobs Search senior-level jobs Search jobs by tech stack Search jobs by contract type Search remote internships Search remote part-time jobs Remote jobs Anywhere in the World Companies Hiring Anywhere in the World Companies Hiring Sales People Anywhere in the World Companies Hiring Software Engineers Anywhere in the World Resources Advice Tips for finding remote jobs Interview questions and answers Resume examples Cover letter examples Post a job Affiliates Privacy policy Terms of service Job board SEO course AI Apply Copilot OpenClaw job finder Jobs by Country Remote jobs anywhere in the world (Worldwide remote jobs) Remote jobs United States Remote jobs Australia Remote jobs Brazil Remote jobs Canada Remote jobs France Remote jobs Ireland Remote jobs Germany Remote jobs Netherlands Remote jobs Spain Remote jobs UK Popular Jobs Remote data analyst jobs Remote customer support jobs Remote executive assistant jobs Remote marketing jobs Remote product designer jobs Remote product manager jobs Remote project manager jobs Remote recruiter jobs Remote sales jobs Remote software engineer jobs Jobs by Type Remote full-time jobs Remote part-time jobs Remote contract jobs Remote internship jobs Remote entry-level jobs Remote jobs with no experience required Remote junior jobs (1-3 years of experience) Digital nomad jobs Remote jobs with no degree required Freelance remote jobs Temporary remote jobs Remote jobs hiring now Stay at home mom jobs

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

SOAR playbooksautomation workflowsincident responseAPI integrationsPythonPowerShellREST APIsJSONautomation governancechange management

Soft Skills

collaborationcommunicationproblem-solvinganalytical thinkingproject managementteamworkadaptabilityattention to detailoperational maturity improvementstakeholder coordination

Certifications

Bachelor’s Degree in Computer ScienceSecurity+CySA+GCIHSC-200AZ-500SOAR platform certificationsMicrosoft certificationsautomation-focused certificationsrelevant cybersecurity certifications