SOAR Engineer: 24/7 Security Automation Lead

Sekuro; Australia; On-site; AUD 120,000 - 190,000; Full time

Job summary

Sekuro is seeking a SOAR Engineer to join the Cloud Security team within Global Managed Security Services Engineering. You will own automation behind a round-the-clock SOC, building and running workflows that enrich, triage and respond to security alerts.

You will maintain code-based playbooks, integrate with CrowdStrike Falcon Fusion and other tools, and help drive AI-assisted triage initiatives. You will design and operate SOAR workflows across Swimlane Turbine, n8n, and CrowdStrike Fusion,

Qualifications

• Two years of experience building and running SOAR or security automation in production.
• Hands-on experience with at least one SOAR or workflow platform (e.g., Swimlane, Falcon Fusion, Splunk SOAR, XSOAR, Sentinel/Logic Apps, Tines, or n8n).
• Strong Python skills and solid grasp of RESTful APIs, JSON, webhooks, and OAuth 2.0 client credentials.
• Experience automating response actions with proper approval, recording and rollback.
• Familiarity with SIEM pipelines and alert lifecycle; ability to communicate with clients and non-technical audiences.

Responsibilities

• Design, build and operate SOAR workflows in Swimlane Turbine, Falcon Fusion and n8n, with code-managed workflows and CI pipelines.
• Create observable, resilient workflows with retry logic and proper failure handling.
• Integrate SOAR with SIEM, EDR, JSM, identity providers, and email security via REST APIs and webhooks.
• Leverage AI tools to read, write, test and refactor automation, with guardrails.
• Partner with Detection Engineering to ensure enrichment and reaction areas are well-scoped, and create reusable multi-client patterns.
• Produce run-books and documentation, and present automation outcomes to client stakeholders.

Skills

Python

REST APIs

Git & CI

SOAR platforms

AI-assisted development

Communication with clients

Security tooling

Tools

Swimlane Turbine

CrowdStrike Falcon Fusion

n8n

Splunk SOAR

Palo Alto XSOAR

Microsoft Teams approvals

GitHub Actions

Job description

Sekuro is seeking a SOAR Engineer to join the Cloud Security team within Global Managed Security Services Engineering. You will own automation behind a round-the-clock SOC, building and running workflows that enrich, triage and respond to security alerts.

You will maintain code-based playbooks, integrate with CrowdStrike Falcon Fusion and other tools, and help drive AI-assisted triage initiatives. You will design and operate SOAR workflows across Swimlane Turbine, n8n, and CrowdStrike Fusion,