Senior Security Automation / SOAR Engineer

upGrad Rekrut; India; Remote; INR 3,000,000 - 5,000,000; Full time

Job summary

upGrad Rekrut is partnering with a product-based cybersecurity company to hire a Senior Security Automation / SOAR Engineer for a permanent, full-time role.

The candidate will design and implement scalable security automation workflows, integrate SOAR with SIEM/EDR/XDR, and advance incident response processes using AI-assisted steps and human approvals. Remote work is offered.

Qualifications

• 7+ years of experience in software development, solutions architecture, or security automation.
• Hands-on experience in a SOC, MSP, or MSSP environment.
• Experience with REST APIs, integrations, and security automation workflows.
• Knowledge of data normalization and schemas such as OCSF/TEDS.
• Experience with SOAR platforms such as Swimlane, Cortex XSOAR, Splunk SOAR, Tines, or Torq.
• Preference for candidates from product-based cybersecurity companies or SaaS product organizations.

Responsibilities

• Design, develop, and maintain security automation playbooks and workflows using SOAR platforms.
• Build integrations with SIEM, EDR/XDR, identity, threat intelligence, ticketing, and cloud security tools.
• Normalize vendor-specific security data into common schemas such as OCSF/TEDS.
• Design and implement deterministic automation workflows with AI-assisted steps and human approval mechanisms.
• Improve incident response efficiency through automated investigation, enrichment, containment, and remediation.
• Collaborate with cross-functional teams to develop scalable and maintainable security orchestration solutions.

Skills

Senior Security Engineer

SOAR

Security automation

REST APIs

SIEM / EDR/XDR integration

Tools

Swimlane

Cortex XSOAR

Splunk SOAR

Tines

Torq

Job description

Hiring: Senior Security Engineer | Remote

Client: Product-Based Company

Hiring Partner: upGrad

We are hiring an experienced Senior Security Engineer for our client, a product-based cybersecurity company, for a permanent, full-time opportunity.

Job Description

We are looking for an experienced Senior Security Automation / SOAR Engineer with strong expertise in security automation, SOAR platform development, and incident response workflows. The ideal candidate will have experience working with product-based cybersecurity companies and building scalable security automation solutions.

Key Responsibilities

• Design, develop, and maintain security automation playbooks and workflows using SOAR platforms.
• Build integrations with SIEM, EDR/XDR, identity, threat intelligence, ticketing, and cloud security tools.
• Normalize vendor-specific security data into common schemas such as OCSF/TEDS.
• Design and implement deterministic automation workflows with AI-assisted steps and human approval mechanisms.
• Improve incident response efficiency through automated investigation, enrichment, containment, and remediation.
• Collaborate with cross-functional teams to develop scalable and maintainable security orchestration solutions.

Required Skills & Qualifications

• 7+ years of experience in software development, solutions architecture, or security automation.
• Hands-on experience in a SOC, MSP, or MSSP environment.
• Strong experience with SOAR platforms such as Swimlane, Cortex XSOAR, Splunk SOAR, Tines, or Torq.
• Experience with REST APIs, integrations, and security automation workflows.
• Experience integrating SIEM, EDR/XDR, identity, threat intelligence, ticketing, and cloud security tools.
• Knowledge of data normalization and common schemas such as OCSF/TEDS.
• Experience designing workflows involving deterministic automation, AI-assisted steps, and human approvals.
• Preference for candidates from product-based cybersecurity companies or SaaS product organizations.

Good to Have

• Experience developing security playbooks, applications, and dashboards.
• Knowledge of incident response, threat intelligence, and detection engineering.