Remote Security Automation & Incident Response Engineer

UChicago Medicine; Illinois; On-site; USD 120,000 - 160,000; Full time

Job summary

UChicago Medicine is seeking an Information Security Engineer to join the Information Security department. This remote, full-time role focuses on automation and incident response to improve SOC efficiency.

You will design and deploy SOAR playbooks, leverage AI-driven workflows, and participate in threat investigations. Responsibilities include log and memory analysis, Python scripting, API integrations, and collaboration with the security team.

Qualifications

• BS or BA degree in Computer Science, Engineering, or related field.
• 5 years of security experience or equivalent training/education.
• Experience with SOAR playbook development.
• Scripting or programming skills (Python, PowerShell, Go).
• Experience in incident response and threat investigation.

Responsibilities

• Develop, implement, and maintain SOAR playbooks to automate security tasks such as alert triage, threat investigation, and incident response.
• Support Security Operations with AI-driven capabilities and automation.
• Investigate malware, intrusions, and data exfiltration events; analyze logs, memory, and network captures.
• Participate in Purple Team activity and on-call rotation; respond to critical security events.

Skills

SOAR playbook development

Python

Threat investigation

Incident response

Scripting

Communication

Logging analysis

Education

BS or BA in Computer Science or related field

Tools

SOAR

APIs

SIEM

Job description

UChicago Medicine is seeking an Information Security Engineer to join the Information Security department. This remote, full-time role focuses on automation and incident response to improve SOC efficiency.

You will design and deploy SOAR playbooks, leverage AI-driven workflows, and participate in threat investigations. Responsibilities include log and memory analysis, Python scripting, API integrations, and collaboration with the security team.