Senior Security Automation Engineer — Hybrid & SOAR Expert

Pretium Enterprise Services, India; Scottsdale (AZ); Hybrid; USD 110,000 - 165,000; Full time

Benefits offered by this job

401(k) plan with employer match

Health, dental, vision and life

Paid Time Off

11 firm holidays

Hybrid office/work from home

Annual bonus eligible

Job summary

Pretium Enterprise Services is seeking a Security Automation Engineer to design, build and operate SOAR-driven workflows across endpoint, identity, and cloud security. This hands-on role emphasizes automation, reliability, and production-grade integration across multiple platforms.

Senior-level candidates will own security platform configurations, validate telemetry, and work closely with MDR/SOC teams to reduce manual work and improve detection-to-response.

Qualifications

• Senior-level security engineering experience with ownership of production integrations and automation.
• Bachelor's Degree in Computer Science or Cybersecurity.
• Strong Python or PowerShell skills and REST API/webhook/JSON experience.
• Hands-on experience with SOAR or equivalent automation, including testing, monitoring, and recovery.
• Incident-response experience and judgment on containment impact and dependencies.
• Experience with endpoint security and at least one domain like email or identity.
• Experience managing automation with version control and least-privilege credentials.
• Ability to communicate tradeoffs and transfer knowledge across teams.

Responsibilities

• Assess configurations, health, and manual work; prioritize engineering roadmap with Cybersecurity leadership.
• Design and maintain SOAR workflows for investigation, containment and remediation.
• Engineer integrations across endpoint, identity, logging, and ticketing systems via APIs and webhooks.
• Own platform configuration standards and reliable integrations; detect telemetry gaps and automate recovery.
• Build automated containment and remediation workflows with defined scopes and approvals.
• Ensure least-privilege access, secrets handling, retries, and auditability in automation.
• Validate MDR telemetry coverage and escalation paths with providers across environments.
• Document runbooks, mentor engineers, and track automation success and coverage.

Skills

Security engineering

Python/PowerShell

SOAR experience

REST API/webhooks

Incident response

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

SOAR platforms

MDR tools

EDR/XDR

Job description

Pretium Enterprise Services is seeking a Security Automation Engineer to design, build and operate SOAR-driven workflows across endpoint, identity, and cloud security. This hands-on role emphasizes automation, reliability, and production-grade integration across multiple platforms.

Senior-level candidates will own security platform configurations, validate telemetry, and work closely with MDR/SOC teams to reduce manual work and improve detection-to-response.