SOAR & AI Security Automation Engineer

Kirkland & Ellis; Chicago (IL); Hybrid; USD 133,000 - 166,000; Full time

Job summary

Kirkland & Ellis is seeking a SOAR & Security Automation Engineer in Chicago to design and scale automated workflows for rapid cyber incident response. You will work within the Cybersecurity Investigations & Response function, advancing SOAR, AI-powered automation, and enterprise security initiatives.

You will collaborate with SOC, detection, IT, and MSSP teams, translating operational gaps into automation opportunities while maintaining strong governance and compliance.

Qualifications

• Bachelor's degree in cybersecurity, information systems, or related field.
• 3–7+ years in cybersecurity, including hands-on SOAR/SOC/incidence response or security engineering.
• Proven design/maintain automation workflows using Cortex XSOAR or Google SecOps.
• Strong scripting skills in Python/PowerShell or similar.

Responsibilities

• Design, build, and continuously improve automation playbooks for incident types like phishing and identity compromise.
• Translate manual processes into scalable automated workflows to improve speed and accuracy.
• Administer and optimize SOAR platforms (Cortex XSOAR, Google SecOps) for reliability.
• Connect security technologies across SIEM, EDR, IAM, ticketing systems, and threat intel.
• Oversee end-to-end lifecycle: development, testing, deployment, tuning of automation solutions.
• Identify repetitive tasks and implement automation to reduce MTTR.
• Develop and track metrics to measure ROI of automation initiatives.
• Build AI-assisted workflows for triage and enrichment using LLMs.
• Collaborate with engineering/detection teams to evolve toward an agentic SOC.

Skills

SOAR design

Python

PowerShell

Cortex XSOAR

Google SecOps

Automation

Incident response

Security concepts

Cross-team collaboration

Communication

Education

Bachelor's degree in Cybersecurity or related field

Tools

Cortex XSOAR

Google SecOps

SIEM

EDR

Job description

Kirkland & Ellis is seeking a SOAR & Security Automation Engineer in Chicago to design and scale automated workflows for rapid cyber incident response. You will work within the Cybersecurity Investigations & Response function, advancing SOAR, AI-powered automation, and enterprise security initiatives.

You will collaborate with SOC, detection, IT, and MSSP teams, translating operational gaps into automation opportunities while maintaining strong governance and compliance.