Lead Security Analyst - SOAR

OpenText; Southwestern Ontario; On-site; CAD 157,000 - 228,000; Full time

Job summary

OpenText is seeking a Lead Security Analyst - SOAR to design, build, and support automated security workflows and integrations. You will reduce manual incident response by crafting reliable automation with Python, Jinja, and REST APIs, while collaborating with analysts, response teams, and tool owners to ensure scalable, production-ready solutions.

The role emphasizes responsible AI adoption, solid troubleshooting skills, and delivering maintainable security automation within a dynamic security

Qualifications

• Bachelor's degree or equivalent with 5+ years in cybersecurity or security operations.
• Experience documenting workflows, versioned logic, and testing playbooks.
• Experience integrating security orchestration, monitoring, and ticketing platforms.

Responsibilities

• Design, develop, and maintain automated security playbooks for alert triage and response.
• Build integrations and data transforms using Python/Jinja for scalable automation.
• Integrate SIEM/EDR and other security tools via REST APIs and connectors.
• Monitor, troubleshoot, and optimize automation workflows for reliability and performance.
• Collaborate with analysts and operations to streamline manual security processes.
• Debug code and maintain automation logic for production readiness.
• Support responsible AI-enabled automation and decision support in security operations.
• Drive best practices with runbooks, change management, and production support.

Skills

Python

Jinja

REST APIs

Security automation

Incident response

Education

Bachelor's degree or equivalent in cybersecurity

Tools

SIEM

EDR

Threat intelligence

Firewall

Ticketing systems

Case management

Job description

Opentext - The Information Company

OpenText is a global leader in information management, where innovation, creativity, and collaboration are the key components of our corporate culture. As a member of our team, you will have the opportunity to partner with the most highly regarded companies in the world, tackle complex issues, and contribute to projects that shape the future of digital transformation.

AI-First. Future-Driven. Human-Centered.

At OpenText, AI is at the heart of everything we do—powering innovation, transforming work, and empowering digital knowledge workers. We are hiring talent AI can't replace to help us shape the future of information management. Join us.

• Must be eligible to obtain and maintain a Government of Canada Secret security clearance. Eligibility requirements for the clearance are established by the Government of Canada and may include Canadian citizenship.

Security Operations

Global Information Security (GIS) leverages our people, processes and technology to develop new digitalization efforts that ensure our enterprise systems’ reliability, minimize staff interaction, and most importantly, protect our customers’ data. Companies are recognizing the need to digitize information and manage alternative work scenarios in today’s changing reality. With this in mind, we work tirelessly to drive improvements across our security services and accelerate our customers’ digital journey in a safe and trusted environment.

Your Impact

The Lead Security Analyst - SOAR is a senior technical lead responsible for designing, building, and supporting security orchestration, automated response, and AI-enabled security workflows. This role develops reliable automation using Python, Jinja, REST APIs, and security orchestration platforms to reduce manual incident response effort and improve security operations efficiency.

The role works closely with security analysts, incident responders, detection engineers, and security tool owners to identify automation opportunities, guide playbook design, support responsible AI-enabled automation, and ensure workflows are reliable, maintainable, and ready for production use.

What The Role Offers

As a Lead Security Analyst, you will:

• Design, develop, and maintain automated security playbooks for alert triage, enrichment, investigation, response, notification, and ticketing.
• Build custom integrations, parsers, and data transformation routines using Python and Jinja to enable scalable security automation.
• Integrate SIEM, EDR, threat intelligence, firewall, case management, and ticketing platforms through REST APIs and supported connectors.
• Monitor, troubleshoot, test, and optimize security automation workflows to improve reliability, performance, and alert handling efficiency.
• Collaborate with security analysts and operational teams to identify, streamline, and automate manual security processes.
• Debug code, enhance workflow execution, and maintain automation logic aligned with operational and incident response requirements.
• Support the responsible adoption of AI and agentic AI capabilities for triage, enrichment, recommendations, analyst productivity, and human-reviewed response actions
• Drive automation best practices through consistent playbook design, testing, documentation, runbooks, change management, and support for SOC, incident response, threat intelligence, detection engineering, and vulnerability management workflows.

What You Need To Succeed

• Strong hands-on experience developing security automation using Python, Jinja, REST APIs, and structured data formats.
• Experience integrating security orchestration, monitoring, endpoint security, network security, threat intelligence, ticketing, and case management platforms.
• Solid understanding of TCP/IP, DNS, HTTPS, and common network protocols used in security investigations and automation workflows.
• Proven ability to troubleshoot complex automation issues, debug code, optimize workflows, and improve operational efficiency.
• Experience documenting workflows, maintaining version-controlled logic, testing playbooks, and supporting reliable production operations.
• Strong collaboration and communication skills, with the ability to translate operational requirements into practical automation solutions.
• Proactive mindset focused on continuous improvement, reducing manual response efforts, and enhancing incident response consistency.
• Bachelor's degree or equivalent experience with 5+ years in cybersecurity, security engineering, automation engineering, or security operations; preferred certifications include Security+, CISSP, GCIH, GCIA, and related cloud security, automation, SOAR, or AI/ML credentials.

One Last Thing

OpenText is more than just a corporation, it's a global community where trust is foundational, the bar is raised, and outcomes are owned.

Join us on our mission to drive positive change through privacy, technology, and collaboration. At OpenText, we don't just have a culture; we have character. Choose us because you want to be part of a company that embraces innovation and empowers its employees to make a difference.

OpenText's commitment to diversity and inclusion surpasses legal requirements, evident in our Equal Employment Opportunity Statement of Policy which promotes a respectful and empowering environment for employees of all backgrounds, culture, national origin, race, color, gender, gender identification, sexual orientation, family status, age, veteran status, disability, religion, or other basis protected by applicable laws.

If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please submit a ticket at Ask HR. Our proactive approach fosters collaboration, innovation, and personal growth, enriching OpenText's vibrant workplace.

Compensation:

At OpenText, we offer a thoughtfully designed benefits package that supports your physical, emotional, and financial wellbeing. As you move through the hiring process, we’re happy to provide more details about our compensation programs, including variable and commission compensation opportunities for eligible roles, vacation entitlement, and paid time off.

Salary Range:

$110,960.00 - $160,960.00; Depending on the candidate’s education, experience, skills, geographical location, and alignment with internal equity and external market, actual salary may vary and be higher or lower than the range posted.

AI Usage Disclosure:

As part of our commitment to transparency, we use artificial intelligence (AI) tools to assist in various stages of our recruitment process, including resume screening, candidate matching, interview scheduling, and communications. These tools are designed to improve efficiency, reduce bias, and enhance candidate experience. All decisions regarding hiring are made by qualified human professionals, and we continuously monitor our AI systems to ensure fairness and compliance with applicable regulations.