Senior SOAR & Security Automation Architect

S&P Global; Princeton (NJ); On-site; USD 140,000 - 155,000; Full time

Benefits offered by this job

Health & Wellness

Flexible Downtime

Continuous Learning

Invest in Your Future

Family Friendly Perks

Beyond the Basics

Job summary

S&P Global is seeking a hands-on Security Automation Engineer to design and implement automated incident response within a large enterprise security program. You will build SOAR playbooks, integrate security tools, and collaborate across SOC, Detection Engineering, and Incident Response teams.

Focus will be on cloud-native security, infrastructure-as-code, and leveraging AI technologies to enhance decision-making.

Qualifications

• 5+ years designing & implementing security automation in enterprise environments with hands-on SOAR platform expertise.
• Hands-on incident response with scalable automated workflows.
• Strong Python programming and REST API development; YARA experience.
• Deep expertise across SIEM (Splunk/Elastic/Sentinel), SOAR (Phantom/XSOAR/Swimlane), and EDR (CrowdStrike/SentinelOne/Microsoft Defender).
• Cloud deployment in AWS using Terraform/CloudFormation/Pulumi.
• Data processing with Pandas/SQL/Elasticsearch for security telemetry.

Responsibilities

• Architect and develop SOAR playbooks and automated workflows to streamline incident triage, containment, and remediation.
• Build and maintain secure integrations across security, IT, and business platforms via APIs and custom code.
• Lead cross-functional collaboration with SOC, Detection Eng, and IR teams to identify automation opportunities.
• Deploy cloud infrastructure using infrastructure-as-code and manage RBAC and DR initiatives.
• Incorporate Agentic AI and Large Language Models into security workflows for better decision-making.
• Produce executive-level reports on automation performance and ROI.

Skills

SOAR automation

Incident response

Python

REST APIs

AWS & IaC

Data analysis (Pandas/SQL/Elast)

Tools

Splunk

Elastic

Sentinel

Phantom

XSOAR

Swimlane

Terraform

CloudFormation

Pulumi

Git/GitLab/Jenkins

Docker/Containerd

ThreatConnect/Anomali/MISP

Job description

S&P Global is seeking a hands-on Security Automation Engineer to design and implement automated incident response within a large enterprise security program. You will build SOAR playbooks, integrate security tools, and collaborate across SOC, Detection Engineering, and Incident Response teams.

Focus will be on cloud-native security, infrastructure-as-code, and leveraging AI technologies to enhance decision-making.