MDR Security Automation Engineer

varonis-internal; Morrisville (NC); On-site; USD 110,000 - 140,000; Full time

Job summary

Varonis MDR delivers 24x7x365 managed detection and response services, protecting customer data through advanced detection, investigation, and response at scale. We seek an MDR Security Engineer to own and scale the automation layer powering our global MDR operations.

This hands-on role requires strong SOAR, security operations, and automation design experience to drive measurable improvements in efficiency and incident response across a high-volume SOC environment.

Qualifications

• 4+ years in Security Operations, MDR, Incident Response, or Security Engineering
• 2–3+ years hands-on experience with SOAR platforms and security automation
• Proven experience owning and operating production-grade automation workflows in a SOC/MDR environment
• Strong understanding of SOC operations, alert triage, escalation workflows, and incident response
• Experience with enterprise security technologies (SIEM, SOAR, EDR/XDR, IAM/AD)
• Strong scripting/development skills (Python, PowerShell, Bash) and experience building APIs and integrations
• Experience with CI/CD, version control (Git), and deploying automation at scale
• Strong analytical thinking and problem-solving skills; excellent communication and collaboration

Responsibilities

• Upkeep the design, development, and lifecycle of SOAR playbooks, workflows, and integrations across the MDR platform
• Build and operate production-grade automation systems supporting alert triage, enrichment, investigation, and response
• Define and drive automation strategy by identifying high-impact, high-volume SOC processes and scaling them through automation
• Develop integrations across SIEM, EDR/XDR, identity, cloud, and ticketing systems using APIs and scripting
• Partner with MDR analysts, IR, threat hunters, and engineering teams to translate operational workflows into scalable automation
• Improve detection and response quality through automation of enrichment, investigation, and containment workflows
• Contribute to incident response and RCAs by delivering tooling that improves investigation speed, accuracy, and consistency
• Evaluate and implement new automation capabilities, including AI-assisted workflows and data-driven decisioning
• Monitoring, Metrics & Reliability Ownership: define automation KPIs, build dashboards, ensure reliability, monitor latency and health
• Continuously optimize workflows to ensure 24/7 MDR operation

Skills

SOAR platforms

Security operations

Automation design

Python

PowerShell

Bash

API integrations

Tools

SIEM

EDR/XDR

Git

CI/CD

Job description

Varonis MDR delivers 24x7x365 managed detection and response services, protecting customer data through advanced detection, investigation, and response at scale. We seek an MDR Security Engineer to own and scale the automation layer powering our global MDR operations.

This hands-on role requires strong SOAR, security operations, and automation design experience to drive measurable improvements in efficiency and incident response across a high-volume SOC environment.