MDR Automation Engineer (SOAR, SIEM)

Varonis; Poland; On-site; PLN 180,000 - 300,000; Full time

Job summary

Varonis is seeking an MDR Security Engineer to own and scale the automation layer powering our 24x7 MDR operations. You will design, build, and operate production-grade automation systems that reduce manual workload and improve detection quality in a high-volume SOC environment.

The ideal candidate has hands-on experience with SOAR platforms, security operations, and automation design, and can drive measurable improvements in efficiency, reliability, and incident response outcomes.

Qualifications

• 4+ years of experience in Security Operations, MDR, Incident Response, or Security Engineering.
• 2-3+ years of hands-on experience with SOAR platforms and security automation.
• Proven experience owning and operating production-grade automation workflows in a SOC/MDR environment.
• Strong understanding of SOC operations, alert triage, escalation workflows, and incident response.
• Experience with enterprise security technologies (SIEM, SOAR, EDR/XDR, IAM/AD).
• Strong scripting/development skills (Python, PowerShell, Bash) and experience building APIs and integrations.
• Experience with CI/CD, version control (Git), and deploying automation at scale.
• Strong analytical thinking and problem‑solving skills with the ability to translate complex workflows into automation.
• Excellent communication and collaboration skills across engineering and operations teams.

Responsibilities

• Upkeep the design, development, and lifecycle of SOAR playbooks, workflows, and integrations across the MDR platform.
• Build and operate production-grade automation systems supporting alert triage, enrichment, investigation, and response.
• Define and drive automation strategy by identifying high-impact, high-volume SOC processes and scaling them through automation.
• Develop integrations across SIEM, EDR/XDR, identity, cloud, and ticketing systems using APIs and scripting.
• Partner with MDR analysts, IR, threat hunters, and engineering teams to translate operational workflows into scalable automation.
• Improve detection and response quality through automation of enrichment, investigation, and containment workflows.
• Contribute to incident response and RCAs by delivering tooling that improves investigation speed, accuracy, and consistency.
• Evaluate and implement new automation capabilities, including AI-assisted workflows and data-driven decisioning.

Skills

Security Operations

MDR

SOAR platforms

Python

PowerShell

Bash

CI/CD

Git

Tools

SIEM

SOAR

EDR/XDR

IAM/AD

Job description

Varonis is seeking an MDR Security Engineer to own and scale the automation layer powering our 24x7 MDR operations. You will design, build, and operate production-grade automation systems that reduce manual workload and improve detection quality in a high-volume SOC environment.

The ideal candidate has hands-on experience with SOAR platforms, security operations, and automation design, and can drive measurable improvements in efficiency, reliability, and incident response outcomes.