Hybrid SOAR Automation Engineer

Euroclear; Poland; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Competitive salary

Comprehensive benefits

International environment

Learning & development

Job summary

Euroclear is seeking a SOAR Developer to design, build, and maintain automation capabilities that strengthen security operations. You will collaborate with Incident Response, Threat Detection Engineering, SOC analysts, and platform teams to deliver high-quality playbooks, integrations, and workflows.

You will build and refine SOAR playbooks, automate integrations, and ensure production-ready content with thorough documentation.

Qualifications

• 3+ years in SOAR engineering or related roles.
• Proven Python automation experience.
• Experience with REST APIs (OAuth2, API keys) and JSON.
• Hands-on experience with automation testing (functional, scenario-based, regression).
• Experience managing SOAR content across dev → integration → prod.
• Knowledge of secure development practices and logging safeguards.
• Understanding of IR workflows; SOC/IR experience is a plus.
• Solid understanding of SIEM, EDR, and logging pipelines.

Responsibilities

• Build and refine SOAR playbooks, automations, integrations, dashboards, and orchestration logic.
• Communicate and demonstrate new or updated workflows to operational teams.
• Ensure automation content is production-ready with clear, maintainable documentation.
• Continuously monitor and optimize workflows to improve reliability, efficiency, and stability.
• Maintain and update SOAR workflows, integrations, content packs, and vendor modules.
• Promote content across environments using Git-based version control and peer reviews.

Skills

Python

REST APIs

Automation testing

SOAR content mgmt

Secure development

IR workflows

SIEM/EDR/logging

Cortex XSOAR

SOAR engineering

Tools

Cortex XSOAR (Demisto)

Job description

Euroclear is seeking a SOAR Developer to design, build, and maintain automation capabilities that strengthen security operations. You will collaborate with Incident Response, Threat Detection Engineering, SOC analysts, and platform teams to deliver high-quality playbooks, integrations, and workflows.

You will build and refine SOAR playbooks, automate integrations, and ensure production-ready content with thorough documentation.