Cybersecurity Automation Engineer – SOAR & SOC Engineering 3643283

Axiom Path; Charlotte (NC); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Axiom Path in Charlotte partners with a global financial institution to advance information security through automation. The Cybersecurity Automation Engineer collaborates with security operations, cloud, and development teams to strengthen defenses and modernize incident response across a complex enterprise.

Build automation for threat detection, incident response, vulnerability management, and compliance monitoring, while gaining exposure to SOAR platforms, threat intelligence, red-team

Qualifications

• 3+ years as Cybersecurity Engineer, Security Automation Engineer or related role.
• Hands-on automation using one or more programming/scripting languages (Python, PowerShell, C#, SQL, JavaScript).
• Experience with SOAR platforms and security orchestration.
• Automation of SOC workflows including alert enrichment, triage, and incident response.
• Strong understanding of security architecture, threat modeling, risk assessment, and frameworks.
• Knowledge of firewalls/IDS/IPS and cloud security (AWS/Azure/GCP).
• Familiarity with CI/CD security integration and API-based integrations.
• Excellent analytical, troubleshooting, and collaboration skills.

Responsibilities

• Design, develop, and maintain automated solutions for threat detection and response.
• Build security orchestration workflows for incident response, threat hunting, and vulnerability management.
• Improve SOC processes by reducing manual tasks and improving detection accuracy.
• Develop scripts, tools, integrations, and frameworks for security testing and data analysis.
• Integrate cybersecurity controls into development, CI/CD, and deployment.
• Collaborate with cross-functional teams to implement security requirements.

Skills

Python

PowerShell

C#

SQL

JavaScript

SOAR platforms

Security Automation

DevSecOps

API integrations

Threat modeling

Communication

Education

Bachelor’s degree in CS/Info Security

Master’s degree (beneficial)

Tools

ServiceNow Security Operations

Palo Alto Cortex XSOAR/Demisto

Splunk Phantom

Job description

Be Part Of A High-Performing Team

Join the information security organization of a global financial institution focused on protecting sensitive financial data, critical infrastructure, and business operations from evolving cyber threats. This collaborative, fast-paced team specializes in detecting, investigating, and responding to security events across a complex enterprise environment. The Cybersecurity Automation Engineer will work closely with security operations, engineering, cloud, infrastructure, and development teams to strengthen defenses and modernize incident-response capabilities through intelligent automation.

What’s In Store For You

• Engagement: W2 only; no C2C or 1099 arrangements.
• Hybrid opportunity based in Charlotte, North Carolina.
• Contribute to enterprise-scale cybersecurity initiatives within a global banking environment.
• Build automation that directly improves threat detection, incident response, vulnerability management, and compliance monitoring.
• Collaborate across cybersecurity, cloud, DevSecOps, infrastructure, and application-development teams.
• Gain exposure to advanced SOAR platforms, threat intelligence, red-team exercises, and security testing.

How You Will Make An Impact

• Design, develop, and maintain automated solutions that detect, investigate, and respond to cybersecurity threats.
• Build security orchestration workflows supporting incident response, threat hunting, vulnerability management, and compliance monitoring.
• Optimize Security Operations Center processes by reducing manual tasks, improving response times, and increasing detection accuracy.
• Develop custom scripts, tools, integrations, and frameworks for security testing, data analysis, and threat intelligence.
• Integrate cybersecurity controls and automated safeguards into development, deployment, and CI/CD processes.
• Partner with cross-functional teams to identify security requirements and implement technologies aligned with the organization’s security strategy.
• Improve existing automation processes based on operational results, emerging threats, and changing security requirements.
• Support security assessments, penetration tests, and red-team exercises to identify vulnerabilities and evaluate security controls.
• Monitor evolving attack methods, vulnerabilities, and industry trends to recommend proactive mitigation strategies.
• Integrate SOAR, cloud-security, endpoint-security, network-security, and threat-intelligence technologies across the enterprise environment.

Do You Bring Proven Success in Cybersecurity Automation and SOAR Engineering?

• At least three years of experience as a Cybersecurity Engineer, Security Automation Engineer, SOAR Engineer, or similar professional; candidates with five to seven years of relevant experience are strongly aligned.
• Hands-on experience developing security automation using one or more programming or scripting languages, including Python, PowerShell, C#, SQL, or JavaScript.
• Practical experience with SOAR or security orchestration platforms such as ServiceNow Security Operations, Palo Alto Cortex XSOAR/Demisto, or Splunk Phantom/SOAR.
• Experience automating Security Operations Center workflows, including alert enrichment, triage, incident response, threat hunting, or vulnerability management.
• Strong understanding of security architecture, threat modeling, risk assessment, and cybersecurity frameworks.
• Knowledge of network and system security technologies, including firewalls, IDS/IPS, endpoint-security platforms, and security-monitoring tools.
• Understanding of cloud-security principles and experience supporting AWS, Microsoft Azure, or Google Cloud environments.
• Familiarity with DevSecOps practices and embedding security controls into CI/CD pipelines.
• Ability to develop API-based integrations between cybersecurity platforms, data sources, and enterprise tools.
• Strong analytical, troubleshooting, and problem-solving capabilities.
• Ability to communicate effectively and collaborate within a fast-moving, cross-functional security environment.
• Bachelor’s degree in computer science, information security, or a related discipline preferred; a master’s degree is beneficial.