Senior SOC Automation & AI Security Engineer

Toyota Tsusho Systems Corporation; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Toyota Tsusho Systems US, Inc. is seeking a Senior Automation & Cybersecurity Engineer to design, build, and scale automation for the Security Operations Center (SOC).

You will own automated detection, enrichment, triage, and response with AI‑assisted workflows to improve analyst efficiency and incident response quality. The role requires strong scripting, API integration, SIEM/SOAR development, and cloud automation, with collaboration across detection engineers, incident responders, and

Qualifications

• 6–9 years of cybersecurity engineering experience.
• 3–4 years focused on security automation, SOC engineering, SIEM/SOAR development.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field preferred.
• Strong proficiency with Python, PowerShell, APIs, and cloud automation.
• Hands‑on with enterprise SIEM/SOAR platforms, Microsoft Sentinel preferred.

Responsibilities

• Design, build, and maintain automation for alert enrichment, correlation, triage, and incident response across SIEM/SOAR platforms.
• Develop integrations using Python, PowerShell, APIs, and cloud‑native services with production‑quality error handling.
• Collaborate with detection engineers, incident responders, and SOC analysts to optimize detection workflows.
• Design AI‑assisted workflows for enrichment, investigation, and decision support with human oversight.
• Partner with security, infrastructure, and compliance teams; participate in reviews; mentor others.

Skills

Cybersecurity engineering

Python

PowerShell

APIs

SIEM/SOAR

Cloud automation

Automation design

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

Microsoft Sentinel

Defender/XDR

Azure Logic Apps

Tines

ServiceNow

Job description

Toyota Tsusho Systems US, Inc. is seeking a Senior Automation & Cybersecurity Engineer to design, build, and scale automation for the Security Operations Center (SOC).

You will own automated detection, enrichment, triage, and response with AI‑assisted workflows to improve analyst efficiency and incident response quality. The role requires strong scripting, API integration, SIEM/SOAR development, and cloud automation, with collaboration across detection engineers, incident responders, and