Security Automation Engineer: AI-Driven SOAR & Integrations

Chubb; Philadelphia (Philadelphia County); On-site; USD 108,000 - 132,000; Full time

Job summary

Chubb is seeking a hands-on Security Automation Engineer to design, build, and maintain a security automation platform powering SOC workflows. You will own the SOAR platform, implement Python automations, create custom API integrations, and develop AI-assisted tooling to accelerate triage and response.

The role emphasizes automating manual analyst tasks end-to-end, improving reliability across EDR, SIEM, tickets, and threat intel integrations, and documenting all automation logic for ongoing

Qualifications

• 3–5 years of IT/security engineering experience with hands-on scripting or automation.
• Strong Python scripting ability and experience integrating REST APIs.
• JavaScript knowledge for building web UI components.
• Experience integrating security tools via API (SIEM, EDR, ticketing, etc.).
• Comfortable using AI coding/analysis tools (Claude Code or similar) to build automation.
• Excellent troubleshooting and debugging across multi-system workflows.
• Strong communication to translate analyst pain points into automation.
• Solid documentation habits for automation logic and integration configurations.

Responsibilities

• Design, build, and maintain SOAR playbooks and Python automations that integrate with EDR, SIEM, ticketing, identity, network, and threat intel tools
• Own and evolve our case and incident management application, including analyst-facing workflows and JavaScript-based UI widgets
• Build and maintain custom API integrations, including non-standard auth schemes (e.g., HMAC request signing), pagination, and high-volume or rate-limited data sources
• Partner with SOC analysts and incident responders to identify manual, repetitive tasks and automate them end-to-end, from alert ingestion through case closure
• Build and extend AI-assisted automation to accelerate triage, enrichment, and response
• Troubleshoot, monitor, and maintain existing automations and integrations, ensuring reliability as underlying tools and APIs change
• Document automation logic, connector configurations, and playbook behavior to support team continuity and knowledge transfer
• Translate manual security runbooks into automated, auditable workflows
• Evaluate new security tools and data sources for integration feasibility and automation potential

Skills

Python scripting

JavaScript

API integrations

AI tooling

Troubleshooting

Documentation

Communication

Time management

Tools

Splunk SOAR

Phantom

Palo Alto XSOAR

Tines

Microsoft Sentinel

LangGraph

Job description

Chubb is seeking a hands-on Security Automation Engineer to design, build, and maintain a security automation platform powering SOC workflows. You will own the SOAR platform, implement Python automations, create custom API integrations, and develop AI-assisted tooling to accelerate triage and response.

The role emphasizes automating manual analyst tasks end-to-end, improving reliability across EDR, SIEM, tickets, and threat intel integrations, and documenting all automation logic for ongoing