SOC Automation Engineer: AI-Driven Playbooks & SOAR Expert

Paymentus; Richmond Hill; On-site; CAD 110,000 - 170,000; Full time

Job summary

Paymentus is seeking a SOC Automation Engineer who can design and maintain automation playbooks in our SOAR environment, integrating Python and PowerShell scripting to reduce analyst fatigue while strengthening incident response.

You will advance AI integration, build API connections across SIEM, EDR, and threat intel tools, and partner with Tier 1/2 analysts to optimize MTTD and MTTR, ensuring reliable, scalable security operations.

Qualifications

• 3+ years of experience in a SOC environment with incident response exposure.
• Strong proficiency in Python and PowerShell.
• Hands-on SOC experience including IR, alert handling, and basic digital forensics.
• Proven SOAR development experience with playbooks and enterprise integrations (Torq a plus).
• Deep understanding of RESTful APIs, JSON/XML, webhooks, and secure integrations.

Responsibilities

• SOAR Development: Design, build, test, and maintain complex automation playbooks within our SOAR platform to handle alert triage, containment, and remediation.
• Custom Scripting: Develop and maintain robust scripts using Python and PowerShell to automate routine SOC tasks, parse logs, and streamline daily operations.
• AI Integration: Spearhead the adoption and safe integration of AI technologies and Large Language Models into our security workflows.
• API Integrations: Build and manage custom API integrations between disparate security tools to ensure seamless data flow and orchestration.
• Process Engineering: Collaborate with Tier 1/2 analysts to identify bottlenecks and repetitive tasks for automation.
• Metrics & Optimization: Track and report on the effectiveness of automations focusing on MTTD and MTTR improvements.
• Incident Response Support: Leverage your IR background to assist with high-severity incidents when necessary.

Skills

Python

PowerShell

SOC experience

SOAR development

APIs & integrations

Tools

Torq

Job description

Paymentus is seeking a SOC Automation Engineer who can design and maintain automation playbooks in our SOAR environment, integrating Python and PowerShell scripting to reduce analyst fatigue while strengthening incident response.

You will advance AI integration, build API connections across SIEM, EDR, and threat intel tools, and partner with Tier 1/2 analysts to optimize MTTD and MTTR, ensuring reliable, scalable security operations.