Lead SOAR & Security Automation Manager

OpenText; United States; Remote; USD 87,000 - 130,000; Full time

Job summary

OpenText is seeking a Lead Service Manager (SOAR) to reduce analyst manual workloads and accelerate MSS operations through automation and AI across our 24x7 multi-tenant environment. The ideal candidate will combine solid security engineering discipline with hands-on SOAR expertise and experience integrating SIEM, EDR, identity, and threat intel via APIs and automation frameworks.

The role requires deep SOC operations knowledge, cloud platform familiarity, and the ability to establish standards,

Qualifications

• 5+ years of Security Engineering, SecDevOps, and automation experience delivering production-grade security solutions.
• Hands-on SOAR expertise building and managing playbooks, integrations, and automated response workflows across complex security environments.
• Strong Python development skills with REST APIs, JSON, webhooks, and automation frameworks.
• Deep understanding of SOC operations, alert lifecycle management, and automation opportunities across triage, enrichment, containment, and response.
• Experience integrating SIEM, EDR, identity, threat intelligence, case management, and collaboration platforms via APIs and automation frameworks.
• Knowledge of Docker, Kubernetes, Git, testing, documentation, and security engineering best practices.
• Experience applying AI, LLMs, and agentic AI frameworks to security workflows, including prompt engineering and guardrails.

Responsibilities

• Identify and automate high-volume SOC tasks (alert triage, enrichment, case creation, notification, containment).
• Design, build, test, and maintain SOAR playbooks and integrations across the security stack.
• Implement AI use cases across the SOC with guardrails and human oversight.
• Integrate tooling via APIs, webhooks, and structured data with maintainable connectors.
• Create feedback loops to tune detection and improvement.
• Collaborate with MSS teams to automate runbooks with clear handoffs and checkpoints.
• Support governed operation of agentic AI with validation and monitoring.
• Establish standards, version control, testing, and documentation for automation content.
• Measure automation impact on MTTA, MTTR, analyst hours saved, false positives, and coverage.

Skills

Security Engineering

SOAR expertise

Python development

REST APIs

Cloud platforms

Automation frameworks

AI in security

Multi-tenant MSS experience

Education

Bachelor's degree or equivalent

Tools

Devo

Microsoft Sentinel

Splunk

QRadar

FortiSOAR

SplunkSOAR

Cortex XSOAR

Swimlane

SentinelOne

CrowdStrike

Job description

OpenText is seeking a Lead Service Manager (SOAR) to reduce analyst manual workloads and accelerate MSS operations through automation and AI across our 24x7 multi-tenant environment. The ideal candidate will combine solid security engineering discipline with hands-on SOAR expertise and experience integrating SIEM, EDR, identity, and threat intel via APIs and automation frameworks.

The role requires deep SOC operations knowledge, cloud platform familiarity, and the ability to establish standards,