SOC Automation Engineer

Paymentus; Richmond Hill; On-site; CAD 110,000 - 170,000; Full time

Job summary

Paymentus is seeking a SOC Automation Engineer who can design and maintain automation playbooks in our SOAR environment, integrating Python and PowerShell scripting to reduce analyst fatigue while strengthening incident response.

You will advance AI integration, build API connections across SIEM, EDR, and threat intel tools, and partner with Tier 1/2 analysts to optimize MTTD and MTTR, ensuring reliable, scalable security operations.

Qualifications

• 3+ years of experience in a SOC environment with incident response exposure.
• Strong proficiency in Python and PowerShell.
• Hands-on SOC experience including IR, alert handling, and basic digital forensics.
• Proven SOAR development experience with playbooks and enterprise integrations (Torq a plus).
• Deep understanding of RESTful APIs, JSON/XML, webhooks, and secure integrations.

Responsibilities

• SOAR Development: Design, build, test, and maintain complex automation playbooks within our SOAR platform to handle alert triage, containment, and remediation.
• Custom Scripting: Develop and maintain robust scripts using Python and PowerShell to automate routine SOC tasks, parse logs, and streamline daily operations.
• AI Integration: Spearhead the adoption and safe integration of AI technologies and Large Language Models into our security workflows.
• API Integrations: Build and manage custom API integrations between disparate security tools to ensure seamless data flow and orchestration.
• Process Engineering: Collaborate with Tier 1/2 analysts to identify bottlenecks and repetitive tasks for automation.
• Metrics & Optimization: Track and report on the effectiveness of automations focusing on MTTD and MTTR improvements.
• Incident Response Support: Leverage your IR background to assist with high-severity incidents when necessary.

Skills

Python

PowerShell

SOC experience

SOAR development

APIs & integrations

Tools

Torq

Job description

We're hiring a SOC Automation Engineer! Are you a developer with a SecOps mindset? We are looking for an automation expert to build complex SOAR playbooks, integrate AI into our workflows, and write Python/PowerShell scripts to reduce analyst fatigue. If you have a background in incident response and a passion for automation (Torq experience is a huge plus!), check out the JD below!

Key Responsibilities

• SOAR Development: Design, build, test, and maintain complex automation playbooks within our SOAR (Security Orchestration, Automation, and Response) platform to handle alert triage, containment, and remediation.
• Custom Scripting: Develop and maintain robust scripts using Python and PowerShell to automate routine SOC tasks, parse logs, and streamline daily operations, directly reducing analyst fatigue.
• AI Integration: Spearhead the adoption and safe integration of AI technologies and Large Language Models (LLMs) into our security workflows to assist with alert summarization, threat intelligence parsing, and automated decision-making.
• API Integrations: Build and manage custom API integrations between disparate security tools (SIEM, EDR, Firewalls, Threat Intel platforms) to ensure seamless data flow and orchestration.
• Process Engineering: Collaborate closely with Tier 1 and Tier 2 analysts to identify bottlenecks, manual pain points, and repetitive tasks that are prime candidates for automation.
• Metrics & Optimization: Track and report on the effectiveness of automations, focusing on measurable improvements to key SOC metrics like Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).
• Incident Response Support: Leverage your background in alert handling and forensics to jump into high-severity incidents when necessary

Required Qualification

• 3 Minimum years of experience
• Development Skills: Strong, proven proficiency in Python and PowerShell
• Security Operations Experience: Hands-on experience working in a SOC environment, with a solid understanding of Incident Response (IR), alert handling, and basic digital forensics
• SOAR Expertise: Proven experience developing playbooks and integrations in enterprise SOAR platforms (Experience with the Torq security automation platform is a strong advantage)
• API & Systems Knowledge: Deep understanding of RESTful APIs, JSON/XML parsing, webhooks, and how to securely interact with third-party applications

This job operates in a professional office environment. This role routinely uses standard office equipment such as laptop computers, photocopiers and smartphone

Physical Demands

While performing the duties of this job, the employee is regularly required to talk or hear. Specific vision abilities required by this job include close vision and ability to adjust focus. This would require the ability to lift files, open filing cabinets and bend or stand on a stool as necessary. The employee is occasionally required to stand; walk; use hands to finger, handle, or feel objects, tools, or controls; reach with hands and arms; and stoop, kneel, crouch or crawl. The employee may be required to lift up to 25 lb

Position Type / Expected Hours of Work

This is a full-time position. Days and hours of work are Monday through Friday during normal business hours. Occasional evening and weekend work may be required as job duties demand

EEO Statement

Paymentus is an equal opportunity employer. We enthusiastically accept our responsibility to make employment decisions without regard to race, religious creed, color, age, sex, sexual orientation, national origin, ancestry, citizenship status, religion, marital status, disability, military service or veteran status, genetic information, medical condition including medical characteristics, or any other classification protected by applicable federal, state, and local laws and ordinances. Our management is dedicated to ensuring the fulfillment of this policy with respect to hiring, placement, promotion, transfer, demotion, layoff, termination, recruitment advertising, pay, and other forms of compensation, training, and general treatment during employmen

Reasonable Accommodation

Paymentus recognizes and supports its obligation to endeavor to accommodate job applicants and employees with known physical or mental disabilities who are able to perform the essential functions of the position, with or without reasonable accommodation. Paymentus will endeavor to provide reasonable accommodations to otherwise qualified job applicants and employees with known physical or mental disabilities, unless doing so would impose an undue hardship on the Company or pose a direct threat of substantial harm to the employee or other

An applicant or employee who believes he or she needs a reasonable accommodation of a disability should discuss the need for possible accommodation with the Human Resources Department, or his or her direct superviso