Senior SOAR Engineer - Automate Incident Response

Adobe; San Jose (CA); On-site; USD 181,000 - 261,000; Full time

Job summary

Adobe is seeking a Senior SOAR Engineer to design and maintain production automation playbooks that shorten mean time to respond. You will partner with Detection Engineering to translate new detections into actionable responses and support CSIRT/SOC Operations with enrichment and correlation logic.

You will also own containment automation for live incidents and build policy enforcement to ensure reliable access decisions.

Qualifications

• 7+ years in security engineering, security automation, or a closely related field.
• Hands-on experience building and maintaining SOAR playbooks (Splunk SOAR, Tines, XSOAR, etc.).
• Advanced proficiency in Python for custom actions, connectors, and playbook logic.
• Practical understanding of incident response and SOC triage workflows.
• Experience connecting SOAR with detection/SIEM platforms via REST APIs.
• Ability to work independently on unstructured problems with defensible, risk-based decisions.
• Strong written and verbal communication to explain playbook logic to engineers and non-technical teammates.
• Hands-on experience using AI-assisted development tools and knowing when they help.

Responsibilities

• Build, develop, and maintain SOAR playbooks that automate enrichment, correlation, and containment.
• Collaborate with Detection Engineering to implement response actions from new detections.
• Support CSIRT/SOC Operations with automation for data enrichment and event association.
• Own containment and remediation automation for Incident Response during live incidents.
• Develop policy-enforcement automation ensuring reliable upstream access and control decisions.
• Integrate SOAR with identity providers, endpoints/EDR, and ticketing systems using REST APIs or custom connectors.
• Triage production playbook issues and track automation coverage, reliability, and time-to-remediate.
• Assist in Detection-as-Code integration and document playbook logic for team ownership.
• Investigate AI integration opportunities across playbooks, scripting, enrichment, and testing.

Skills

SOAR playbooks

Python scripting

Incident response

REST APIs

Communication

AI tooling

Independent problem solving

Tools

Splunk SOAR

Tines

XSOAR

Job description

Adobe is seeking a Senior SOAR Engineer to design and maintain production automation playbooks that shorten mean time to respond. You will partner with Detection Engineering to translate new detections into actionable responses and support CSIRT/SOC Operations with enrichment and correlation logic.

You will also own containment automation for live incidents and build policy enforcement to ensure reliable access decisions.