Remote Security Automation Engineer I

CBTS; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

CBTS is seeking a Security Automation Engineer I to contribute to the growth of our Security Operations team by developing automation playbooks and integrations across SOAR and XDR platforms. You will translate analyst workflows into reliable automation to accelerate triage, enrichment, containment, and remediation in the SOC.

The role requires 2+ years as a SOC analyst, 1–2 years with SOAR (XSOAR or XSIAM preferred), a bachelor’s degree, and hands-on scripting with Python.

Qualifications

• 2+ years as a SOC analyst with hands-on alert triage and threat investigation.
• 1-2 years of experience with SOAR platforms (XSOAR/XSIAM preferred).
• Bachelor’s degree or equivalent practical experience.

Responsibilities

• Develop, test, and maintain automated playbooks and integrations across SOAR/XDR platforms.
• Collaborate with SOC analysts to translate manual workflows into automation.
• Troubleshoot integration and automation failures and improve playbook performance.

Skills

Automation playbooks

Python scripting

REST APIs

JSON

XSOAR/XSIAM

Threat intelligence

Education

Bachelor’s degree or equivalent

Tools

Python

REST APIs

Regex

JSON

Job description

CBTS is seeking a Security Automation Engineer I to contribute to the growth of our Security Operations team by developing automation playbooks and integrations across SOAR and XDR platforms. You will translate analyst workflows into reliable automation to accelerate triage, enrichment, containment, and remediation in the SOC.

The role requires 2+ years as a SOC analyst, 1–2 years with SOAR (XSOAR or XSIAM preferred), a bachelor’s degree, and hands-on scripting with Python.