SOC Automation Professional

SafeAeon Inc.; Mohali; On-site; INR 400,000 - 600,000; Full time

Job summary

SafeAeon Inc. seeks a Junior SOC Automation Engineer to help build and maintain automation workflows in our Security Operations Center. You will turn repetitive analyst tasks into reliable automated pipelines using modern security tooling and scripting.

The role suits candidates with up to one year of experience from internships, personal projects, CTFs, or academic work. You will work at the intersection of cybersecurity and engineering in Mohali.

Qualifications

• Proficiency in Python/JS scripting for API calls and data parsing.
• Strong REST API knowledge including authentication and parsing.
• JSON data transformation skills.
• Linux CLI proficiency for log inspection and scripting.
• Basic networking fundamentals (DNS, HTTP/S, ports).
• Familiar with SIEM/EDR concepts and IOCs.

Responsibilities

• Build and maintain automation playbooks for alert triage and escalation workflows.
• Develop Python/PowerShell scripts for API integrations, log parsing, and automated actions.
• Integrate security tools via REST APIs (SIEM, EDR, threat intel, Jira, ServiceNow).
• Parse and normalize data across JSON and Syslog formats for automation pipelines.
• Handle webhook configurations and event-driven triggers for real-time automation.
• Troubleshoot failed workflows and perform root cause analysis for reliability.
• Document all workflows, playbooks, and API configurations in a Git repository.
• Collaborate with SOC analysts to identify manual processes suitable for automation.

Skills

Python scripting

REST APIs

JSON data

Linux CLI

Networking basics

IOC awareness

Jira

Tools

Jira

ServiceNow

n8n

Tines

XSOAR

Splunk SOAR

Git

Job description

We are looking for a Junior SOC Automation Engineer who can actively contribute to building and maintaining automation workflows within our Security Operations Center. You will work at the intersection of cybersecurity and engineering - turning repetitive analyst tasks into reliable, automated pipelines using real security tooling and scripting.

This role suits candidates with up to one year of experience gained through internships, personal projects, CTFs, or academic work.

Key Responsibilities

• Build and maintain automation playbooks for alert triage, IOC enrichment, ticket creation, and escalation workflows using platforms like n8n, Tines, or XSOAR
• Develop Python/PowerShell scripts for API integrations, log parsing, and automated response actions
• Integrate security tools including SIEM, EDR, threat intel platforms (VirusTotal, AbuseIPDB), and ticketing systems (Jira, ServiceNow) via REST APIs
• Parse and normalize data across JSON, Syslog formats for use in automation pipelines
• Handle webhook configurations and event-driven triggers for real-time automation
• Troubleshoot failed workflows, perform root cause analysis, and maintain pipeline reliability
• Document all workflows, playbooks, and API configurations in a Git repository
• Collaborate with SOC analysts to identify manual processes suitable for automation

Required Qualifications

Technical Skills - Must Have

• Proficiency in Python/JS scripting - API calls, data parsing, error handling
• Strong understanding of REST APIs - authentication (API keys, OAuth, Bearer tokens), request handling, and response parsing
• Solid grasp of JSON and data transformation across formats
• Comfort with Linux CLI - log inspection, file handling, running scripts
• Basic understanding of networking fundamentals - DNS, HTTP/S, ports, protocols
• Awareness of common attack types and IOCs - phishing, malware, brute force
• Tools - Exposure Expected

Conceptual understanding of what a SIEM is and how it functions - log aggregation, alert generation, correlation rules, and its role in a SOC environment. Hands-on exposure is a plus.

• Familiarity with a ticketing system (Jira, ServiceNow)
• Basic Git usage - commits, branching, pull requests

Preferred Qualifications

• Exposure to SOAR platforms (XSOAR, Splunk SOAR, Tines, Shuffle, n8n)
• Experience consuming security APIs
• Familiarity with MITRE ATT&CK framework
• Basic knowledge of incident response lifecycle

Key Competencies

• Strong debugging and troubleshooting mindset
• Ability to translate analyst requirements into automation logic
• High attention to detail in workflow design and script output
• Self-driven with ability to take ownership of tasks end-to-end
• Eagerness to continuously learn new tools and techniques

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.