Senior Security Automation & Orchestration Engineer

GuidePoint Security LLC; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

GuidePoint Security LLC is seeking an experienced security automation engineer with a strong background in SOC operations, incident response, and end-to-end automation design. You will build and optimize workflows using leading SOAR platforms and integrate security tools via REST APIs and webhooks.

The role requires Python scripting, familiarity with SIEM/EDR/XDR ecosystems, and the ability to translate client requirements into scalable automation plans.

Qualifications

• 5+ years in security operations with end-to-end SOC understanding (alert triage, escalation, incident response, case management)
• 3+ years designing and building security automation/orchestration workflows
• Hands-on experience with at least one SOAR/automation platform (Tines, Torq, Cortex XSOAR preferred)
• Proficiency integrating security and IT systems via REST APIs, webhooks, and JSON
• Scripting ability, primarily Python, for custom logic and data transforms
• Familiarity with tooling categories automation connects to (SIEM, EDR/XDR, ticketing such as ServiceNow/Jira)
• Ability to decompose manual security processes into automated workflows with error handling
• Interest in emerging technologies, including AI tools, to improve outcomes
• Experience in detection engineering concepts and automation-as-code practices (Git)

Skills

SOC operations

security automation

REST API integration

Python scripting

SIEM/EDR/XDR familiarity

ticketing systems

automation design

AI tools familiarity

Tools

SOAR platforms: Tines

SOAR platforms: Torq

SOAR platforms: Cortex XSOAR

Version control (Git)

Cloud tooling (AWS/Azure)

Job description

GuidePoint Security LLC is seeking an experienced security automation engineer with a strong background in SOC operations, incident response, and end-to-end automation design. You will build and optimize workflows using leading SOAR platforms and integrate security tools via REST APIs and webhooks.

The role requires Python scripting, familiarity with SIEM/EDR/XDR ecosystems, and the ability to translate client requirements into scalable automation plans.