SOAR Automation Engineer – Hybrid/Remote

Euroclear; Kraków; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Competitive salary

Learning and development

Global environment

Job summary

Euroclear is seeking a SOAR Developer to design, build, and maintain automation capabilities that strengthen security operations. You will work with Incident Response, Threat Detection Engineering, SOC analysts, and platform teams to deliver high-quality playbooks, integrations, and workflows.

The role requires strong Python skills, experience with REST APIs, and hands-on automation testing. Hybrid working model with international collaboration across teams is offered.

Qualifications

• Strong Python skills for automation and integrations.
• Experience with REST APIs (OAuth2, API keys), JSON, and common web service standards.
• Hands-on experience with automation testing: functional, scenario-based, regression, and integration.
• Experience managing SOAR content across multi-stage environments (dev → integration → prod).
• Knowledge of secure development practices, logging/auditing safeguards, and safe API handling.
• Understanding of IR workflows (triage, investigation, containment). SOC/IR experience is a plus.
• Solid understanding of SIEM, EDR, logging pipelines, network/security fundamentals.
• 3+ years in SOAR engineering, security automation, SOC engineering, or IR-related roles.
• Hands-on experience with Palo Alto Cortex XSOAR (Demisto).

Responsibilities

• Build and refine SOAR playbooks, automations, integrations, dashboards, and orchestration logic.
• Communicate and demonstrate new or updated workflows to operational teams.
• Ensure automation content is production-ready with clear, maintainable documentation.
• Continuously monitor and optimize workflows to improve reliability, efficiency, and stability.
• Maintain and update SOAR workflows, integrations, content packs, and vendor modules.
• Promote content across environments using Git-based version control and peer reviews.

Skills

Python

REST APIs

JSON

Automation testing

IR workflows

Tools

Palo Alto Cortex XSOAR

Git

Job description

Euroclear is seeking a SOAR Developer to design, build, and maintain automation capabilities that strengthen security operations. You will work with Incident Response, Threat Detection Engineering, SOC analysts, and platform teams to deliver high-quality playbooks, integrations, and workflows.

The role requires strong Python skills, experience with REST APIs, and hands-on automation testing. Hybrid working model with international collaboration across teams is offered.