Senior SOC Automation & AI Security Engineer (Remote)

Calance, Inc.; Plano (TX); Remote; USD 200,579,000 - 243,560,000; Full time

Benefits offered by this job

EPO/PPO Medical Plan (Anthem)

HMO/PPO Dental programs (Anthem)

Vision - VSP (MetLife)

401K VOYA Retirement vesting program

Job summary

Calance, Inc. seeks a Sr. Automation & Cybersecurity Engineer to lead automation in a modern SOC from Plano, TX with remote options.

You will own automated detection, enrichment, triage, and response workflows, and explore AI-assisted capabilities to reduce analyst toil. Design and scale automation across SIEM/SOAR platforms (Microsoft Sentinel/Defender/XDR, Azure Logic Apps, Tines, ServiceNow) and integrate with Python, PowerShell, APIs, and cloud services.

Qualifications

• 6–9 years of cybersecurity engineering experience, with 3–4 years focused on security automation or SOC engineering.
• Strong proficiency in Python, PowerShell, APIs, and cloud automation patterns.
• Hands-on experience with enterprise SIEM/SOAR platforms (Microsoft Sentinel preferred).
• Solid understanding of threat detection, logging pipelines, and incident response workflows.

Responsibilities

• Design, build, and maintain automation for alert enrichment, correlation, triage, incident response, and case handoffs across SIEM/SOAR platforms.
• Develop integrations using Python, PowerShell, APIs, and cloud-native services with production-grade error handling and documentation
• Collaborate with SOC analysts and incident responders to identify automation opportunities and reduce false positives
• Design AI-assisted and agentic workflows for investigation and decision support, ensuring human-in-the-loop controls and auditability
• Mentor team members and establish reusable automation standards through code/design reviews

Skills

Python

PowerShell

APIs

Cloud automation

SIEM/SOAR

Threat detection

Incident response

Tools

Microsoft Sentinel

Defender/XDR

Azure Logic Apps

Tines

ServiceNow

Job description

Calance, Inc. seeks a Sr. Automation & Cybersecurity Engineer to lead automation in a modern SOC from Plano, TX with remote options.

You will own automated detection, enrichment, triage, and response workflows, and explore AI-assisted capabilities to reduce analyst toil. Design and scale automation across SIEM/SOAR platforms (Microsoft Sentinel/Defender/XDR, Azure Logic Apps, Tines, ServiceNow) and integrate with Python, PowerShell, APIs, and cloud services.