Security Automation Specialist / SOAR Consultant

Winged IT; Polska; Hybrid; PLN 183,000 - 199,000; Full time

Job summary

International Pharmaceutical Company seeks a Security Automation Specialist / SOAR Consultant to support security operations, automation, and incident response across a large international organization. Role blends SOAR engineering, security automation, SIEM support, and operational consulting.

Candidate should have 2–3 years in security operations, hands-on SOAR experience, and interest in developing Torq skills, with strong communication and independent work in an international setting.

Qualifications

• 2–3 years in Security Operations or SOC
• Hands-on SOAR platform experience (e.g. Torq, XSOAR, Splunk SOAR)
• Willingness to learn Torq
• Strong understanding of SOC incident response workflows
• Experience with REST APIs, JSON, webhooks
• Experience with SIEM such as Microsoft Sentinel, Splunk, QRadar, or Elastic
• Experience with EDR such as CrowdStrike, Defender for Endpoint, SentinelOne, or Carbon Black
• Scripting in Python or PowerShell
• Familiarity with Azure/AWS/GCP
• Strong communication and ability to work in an international environment

Responsibilities

• Designing, maintaining, and improving automated security workflows within a SOAR environment.
• Supporting SOC and incident response processes through automation.
• Handling security-related tickets, operational requests, and workflow issues.
• Automating use cases such as phishing, malware, suspicious authentication activity, and other security alerts.
• Integrating security tools using REST APIs, webhooks, and custom connectors.
• Enriching alerts with data from SIEM, EDR, identity, ticketing, and threat intelligence platforms.
• Troubleshooting and optimizing existing security automations.
• Working with security teams to identify processes that can be automated and improved.
• Building hands-on expertise in Torq as part of the project.

Skills

Security Operations

SOAR platforms

Torq

SOC processes

REST APIs

JSON

SIEM

EDR

Python/PowerShell

Cloud: Azure/AWS/GCP

Communication

Job description

Security Automation Specialist / SOAR Consultant

Client: International Pharmaceutical Company

Location: Remotely from Poland

Working hours: 3:00 PM–11:00 PM Polish time

Cooperation model: B2B or Employment Contract

Rate : 34 – 37 USD

Recruitment process: 2-3 online interviews

For our client, a leading global biopharmaceutical company, we are looking for a Security Automation Specialist / SOAR Consultant to support security operations, automation, and incident response processes within a large international organization.

Our client operates across 70 countries and employs more than 66000 people worldwide, with approximately 2500 employees in Poland, including teams working in technology and global business functions. The company has a strong international presence, and Poland is one of its key global and regional hubs.

The role combines SOAR engineering, security automation, SIEM support, and operational consulting. We are looking for someone with around 2–3 years of relevant experience, hands-on experience with any SOAR platform, and a strong interest in developing further with Torq.

Your role is:

• Designing, maintaining, and improving automated security workflows within a SOAR environment.
• Supporting SOC and incident response processes through automation.
• Handling security-related tickets, operational requests, and workflow issues.
• Automating use cases such as phishing, malware, suspicious authentication activity, and other security alerts.
• Integrating security tools using REST APIs, webhooks, and custom connectors.
• Enriching alerts with data from SIEM, EDR, identity, ticketing, and threat intelligence platforms.
• Troubleshooting and optimizing existing security automations.
• Working with security teams to identify processes that can be automated and improved.
• Building hands-on expertise in Torq as part of the project.

Your skills and experiences:

• 2–3 years of experience in Security Operations, Security Engineering, Security Automation, SOC, or a similar area.
• Hands-on experience with at least one SOAR platform, e.g. Torq, Palo Alto XSOAR, Splunk SOAR, Tines, Swimlane, or another comparable solution.
• Torq experience is not required — practical SOAR experience and willingness to learn Torq are sufficient.
• Good understanding of SOC processes and incident response workflows.
• Experience with REST APIs, JSON, authentication mechanisms, and webhooks.
• Experience with at least one SIEM platform such as Microsoft Sentinel, Splunk, QRadar, or Elastic.
• Knowledge of EDR technologies such as CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, or Carbon Black.
• Scripting skills in Python, PowerShell, or a similar language.
• Familiarity with Azure, AWS, or GCP.
• Very good communication skills and ability to work independently in an international environment.

Our client offers:

• Great opportunity for personal development in a stable and friendly large multinational company.
• Career growth and additional education.