SOAR Security Automation Engineer – Hybrid (EU/UK)

Euroclear; Polska; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Competitive salary

Comprehensive benefits

Hybrid working model

Job summary

Euroclear is seeking a SOAR Developer to design, build, and maintain automation capabilities that strengthen our security operations worldwide. You will collaborate with Incident Response, Threat Detection Engineering, SOC analysts, and platform teams to deliver robust playbooks, integrations, and workflows.

You will drive automation across multi‑stage environments, ensure production readiness, and continuously optimize processes for reliability and efficiency while adhering to secure coding

Qualifications

• Strong Python skills for automation and integrations.
• Experience with REST APIs (OAuth2, API keys) and JSON.
• Hands‑on experience with automation testing across functional, scenario‑based, regression, and integration tests.
• Experience managing SOAR content across dev → integration → prod environments.
• Knowledge of secure development practices, logging/auditing safeguards, and safe API handling.

Responsibilities

• Build and refine SOAR playbooks, automations, integrations, dashboards, and orchestration logic.
• Communicate and demonstrate new or updated workflows to operational teams.
• Ensure automation content is production‑ready with clear, maintainable documentation.
• Continuously monitor and optimize workflows to improve reliability, efficiency, and stability.
• Maintain and update SOAR workflows, integrations, content packs, and vendor modules.
• Promote content across environments using Git‑based version control and peer reviews.

Skills

Python automation

REST APIs

Automation testing

SOAR content management

Security scripting

IR workflows understanding

Git knowledge

Multi‑environment deployment

Palo Alto Cortex XSOAR

Tools

Palo Alto Cortex XSOAR (Demisto)

Git

APIs integration tooling

Job description

Euroclear is seeking a SOAR Developer to design, build, and maintain automation capabilities that strengthen our security operations worldwide. You will collaborate with Incident Response, Threat Detection Engineering, SOC analysts, and platform teams to deliver robust playbooks, integrations, and workflows.

You will drive automation across multi‑stage environments, ensure production readiness, and continuously optimize processes for reliability and efficiency while adhering to secure coding