Senior Security Automation Engineer

Piper Companies; United States; Remote; USD 130,000 - 145,000; Full time

Benefits offered by this job

Medical plan

Dental plan

Vision plan

401(k)

PTO

Paid holidays

Job summary

Piper Companies is seeking a Senior Security Automation Engineer to design and optimize security automation across enterprise environments. You will build and maintain SOAR playbooks, develop Python-based automation, and integrate SOAR with SIEM, EDR, ITSM, and other security tools.

Collaborate with cybersecurity, SOC, engineering, and infrastructure teams to improve automation, provide runbooks and documentation, and ensure scalable, auditable workflows. This remote role supports US operations.

Qualifications

• Minimum 5+ years in cybersecurity, security engineering, or related field.
• Hands-on experience with major SOAR platforms.
• Strong Python development and scripting.
• Experience integrating security platforms via REST APIs.
• Familiarity with SIEM, EDR, ITSM, threat intel, and IAM.
• Understanding SOC operations and incident response.

Responsibilities

• Design, develop, and optimize security automation and orchestration workflows across enterprise security environments.
• Build and maintain SOAR playbooks supporting alert enrichment, investigation, incident response, escalation, and automated remediation.
• Develop Python-based automation and custom integrations using REST APIs and other security platform interfaces.
• Integrate SOAR platforms with SIEM, EDR, ITSM, threat intelligence, identity, and other cybersecurity technologies.
• Develop reusable automation frameworks and standardized workflows to reduce manual analyst effort.
• Troubleshoot and enhance existing automation, integrations, playbooks, and security workflows.
• Collaborate with cybersecurity, SOC, engineering, and infrastructure teams to identify automation and process improvement opportunities.
• Support implementation, configuration, testing, and optimization of security automation platforms.
• Develop technical documentation, runbooks, integration guides, and operational procedures.
• Provide technical guidance and knowledge transfer to security operations teams.
• Ensure automation workflows are reliable, auditable, scalable, and aligned with security requirements.

Skills

Python development

SOAR expertise

Communication skills

Independent work

Analytical problem-solving

Tools

Splunk SOAR

Cortex XSOAR

Demisto

Splunk Enterprise Security

ServiceNow integrations

Docker

Kubernetes

Git

Jenkins

Job description

Responsibilities of the Senior Security Automation Engineer:

• Design, develop, and optimize security automation and orchestration workflows across enterprise security environments
• Build and maintain SOAR playbooks supporting alert enrichment, investigation, incident response, escalation, and automated remediation
• Develop Python-based automation and custom integrations using REST APIs and other security platform interfaces
• Integrate SOAR platforms with SIEM, EDR, ITSM, threat intelligence, identity, and other cybersecurity technologies
• Develop reusable automation frameworks and standardized workflows to reduce manual analyst effort
• Troubleshoot and enhance existing automation, integrations, playbooks, and security workflows
• Collaborate with cybersecurity, SOC, engineering, and infrastructure teams to identify automation and process improvement opportunities
• Support implementation, configuration, testing, and optimization of security automation platforms
• Develop technical documentation, runbooks, integration guides, and operational procedures
• Provide technical guidance and knowledge transfer to security operations teams
• Ensure automation workflows are reliable, auditable, scalable, and aligned with security requirements

Qualifications for the Senior Security Automation Engineer:

• 5+ years of experience in cybersecurity, security engineering, security operations, or a related technical discipline
• Hands‑on experience with SOAR platforms such as Splunk SOAR/Phantom, Cortex XSOAR, or Demisto
• Strong Python development and scripting experience
• Experience developing REST API integrations and connecting cybersecurity platforms
• Experience designing security automation workflows, orchestration processes, and SOAR playbooks
• Experience with SIEM platforms, particularly Splunk and/or Splunk Enterprise Security
• Understanding of SOC operations, incident response, alert triage, enrichment, and automated remediation
• Experience integrating EDR, threat intelligence, ITSM, identity, and endpoint security platforms
• Strong troubleshooting, analytical, and problem-solving skills
• Ability to work independently and collaborate effectively with technical and security teams
• Excellent written and verbal communication skills

Preferred Qualifications:

• Experience with Splunk Enterprise Security, Splunk Cloud, or Splunk SOAR
• Experience with Cortex XSOAR/Demisto
• Experience with ServiceNow integrations
• Experience with Cribl, CrowdStrike, Tanium, or other enterprise security platforms
• Experience with AWS, Azure, Docker, Kubernetes, Git, Jenkins, or CI/CD pipelines
• Experience working in an MSSP, MDR, cybersecurity consulting, or professional services environment
• Experience with detection engineering, MITRE ATT&CK, threat intelligence, or UEBA
• Splunk, GIAC/SANS, CISSP, or related cybersecurity certifications

Compensation for the Senior Security Automation Engineer:

• Salary: $130,000 - $145,000 + Bonus Incentives
• Comprehensive benefits package including Medical, Dental, Vision, 401(k), PTO, and Paid Holidays

#LI-MM1 #LI-REMOTE

Keywords

Splunk SOAR, Splunk Phantom, Cortex XSOAR, Demisto, SOAR, Security Automation, Security Orchestration, Python, REST API, API Integration, SIEM, Splunk Enterprise Security, Splunk ES, Playbooks, Incident Response, SOC, EDR, ServiceNow, Threat Intelligence, Detection Engineering, MSSP, MDR, Cybersecurity, Automation, Orchestration