Remote SOAR Engineer – Security Automation Specialist

Winged IT; Polska; Hybrid; PLN 183,000 - 199,000; Full time

Job summary

International Pharmaceutical Company seeks a Security Automation Specialist / SOAR Consultant to support security operations, automation, and incident response across a large international organization. Role blends SOAR engineering, security automation, SIEM support, and operational consulting.

Candidate should have 2–3 years in security operations, hands-on SOAR experience, and interest in developing Torq skills, with strong communication and independent work in an international setting.

Qualifications

• 2–3 years in Security Operations or SOC
• Hands-on SOAR platform experience (e.g. Torq, XSOAR, Splunk SOAR)
• Willingness to learn Torq
• Strong understanding of SOC incident response workflows
• Experience with REST APIs, JSON, webhooks
• Experience with SIEM such as Microsoft Sentinel, Splunk, QRadar, or Elastic
• Experience with EDR such as CrowdStrike, Defender for Endpoint, SentinelOne, or Carbon Black
• Scripting in Python or PowerShell
• Familiarity with Azure/AWS/GCP
• Strong communication and ability to work in an international environment

Responsibilities

• Designing, maintaining, and improving automated security workflows within a SOAR environment.
• Supporting SOC and incident response processes through automation.
• Handling security-related tickets, operational requests, and workflow issues.
• Automating use cases such as phishing, malware, suspicious authentication activity, and other security alerts.
• Integrating security tools using REST APIs, webhooks, and custom connectors.
• Enriching alerts with data from SIEM, EDR, identity, ticketing, and threat intelligence platforms.
• Troubleshooting and optimizing existing security automations.
• Working with security teams to identify processes that can be automated and improved.
• Building hands-on expertise in Torq as part of the project.

Skills

Security Operations

SOAR platforms

Torq

SOC processes

REST APIs

JSON

SIEM

EDR

Python/PowerShell

Cloud: Azure/AWS/GCP

Communication

Job description

International Pharmaceutical Company seeks a Security Automation Specialist / SOAR Consultant to support security operations, automation, and incident response across a large international organization. Role blends SOAR engineering, security automation, SIEM support, and operational consulting.

Candidate should have 2–3 years in security operations, hands-on SOAR experience, and interest in developing Torq skills, with strong communication and independent work in an international setting.