Security Automation & SOAR Engineer

Huntington National Bank; Birmingham (AL); On-site; USD 70,000 - 140,000; Full time

Benefits offered by this job

Health insurance coverage

Wellness program

Life insurance

Disability insurance

Retirement savings plan

Paid leave programs

Paid holidays

Job summary

Huntington National Bank is seeking a Security Automation and Orchestration Engineer to design and implement automation across SecOps, threat detection, and compliance. You will build playbooks for SOAR platforms and integrate SIEM/EDR, IAM, and cloud security tools to scale security operations.

The role emphasizes collaboration with Cybersecurity, DevOps, and Infra teams, with on-call rotation and a focus on reducing manual monitoring efforts.

Qualifications

• 5+ years in production support and IT automation.
• 5+ years in operational security technologies or automation environments.
• 5+ years implementing technology lifecycles and best practices.
• Bachelor’s Degree or 4+ additional years of equivalent experience.

Responsibilities

• Design and implement automation for security operations (SecOps).
• Develop and maintain playbooks for SOAR platforms (Splunk SOAR, XSOAR, Microsoft Sentinel).
• Design, develop, and maintain scalable automation frameworks for cybersecurity operations.
• Automate compliance checks and reporting for frameworks like NIST, ISO 27001, CIS Controls.
• Integrate security tools (SIEM, EDR, firewalls, IAM) into automated workflows.
• Collaborate with cybersecurity, DevOps, and infrastructure teams to embed security into CI/CD pipelines.
• Lead initiatives to reduce manual monitoring effort and on-call remediation.
• Engage in automation strategy and mentor junior engineers.

Skills

Automation

SecOps

Python

PowerShell

CI/CD security

Education

Bachelor's Degree

Tools

Splunk SOAR

Palo Alto XSOAR

Microsoft Sentinel

Wireshark

TCPdump

Job description

Huntington National Bank is seeking a Security Automation and Orchestration Engineer to design and implement automation across SecOps, threat detection, and compliance. You will build playbooks for SOAR platforms and integrate SIEM/EDR, IAM, and cloud security tools to scale security operations.

The role emphasizes collaboration with Cybersecurity, DevOps, and Infra teams, with on-call rotation and a focus on reducing manual monitoring efforts.