Senior Security Automation Engineer — AI SOC (Remote)

Weekday; United States; Remote; USD 13,000 - 47,000; Full time

Job summary

Weekday is seeking a Senior Security Engineer to design and implement scalable security automation, integrating SIEM, SOAR, EDR, and threat intel, while exploring AI/LLM-powered workflows. You will convert customer use cases into production-grade content and maintain reusable automation assets.

Remote role with focus on security operations, incident response, and automation frameworks across diverse environments.

Qualifications

• Must possess strong Python/JavaScript programming skills for automation and SOC playbooks.
• Deep understanding of security operations, threat detection, and incident response.
• Experience building scalable security automation content and integrations.
• Knowledge of SIEM, SOAR, EDR, vulnerability management, and threat intel tools.
• Ability to turn customer needs into production-grade automation.

Responsibilities

• Security Automation Development: design, develop, and maintain automation components, connectors, and playbooks.
• Security Platform Integration: build integrations with SIEM, SOAR, EDR, vulnerability management, and threat intel platforms.
• AI and LLM-Powered Security Automation: integrate AI/LLM into automation workflows and intelligent analysis.
• Production Engineering and Content Management: maintain and improve security automation content library, apply best practices.
• Cross-Functional Collaboration: partner with Sales Engineering, Professional Services, and Product teams to deliver solutions.

Skills

Python programming

SOAR

Playbook development

Cybersecurity fundamentals

Problem solving

Software engineering

SIEM

EDR

Threat intelligence

JavaScript

Generative AI

REST APIs

Job description

Weekday is seeking a Senior Security Engineer to design and implement scalable security automation, integrating SIEM, SOAR, EDR, and threat intel, while exploring AI/LLM-powered workflows. You will convert customer use cases into production-grade content and maintain reusable automation assets.

Remote role with focus on security operations, incident response, and automation frameworks across diverse environments.