SOAR Engineer: Automated Incident Response & AI

AnaVation LLC; Reston (VA); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Disability insurance

Vision insurance

401k with match

Competitive pay

Paid leave & holidays

Tuition reimbursement

Life and AD&D Insurance

Job summary

AnaVation LLC is seeking a Security Automation (SOAR) Engineer to build, optimize, and scale automated incident response workflows. You will bridge security operations and software engineering using low-code/pro-code tools and AI to cut response times and strengthen threat posture.

Responsibilities include designing playbooks, writing automation logic, API integrations, and translating triage steps into automated actions while leveraging frontier LLMs to improve automation quality.

Qualifications

• Active TS/SCI Clearance with CI Polygraph
• Bachelor’s degree and 8 years of related experience
• Active IAT Level II (e.g. Security+) and CSSP Infrastructure Security certifications by onboarding date
• Certifications covering CS Analyst (CySA+) and other listed.
• Experience building security orchestration and automated response workflows
• REST API integration, webhook management, and event-driven systems
• Familiarity with frontier LLMs (ChatGPT, Grok, Claude) a strong plus

Responsibilities

• Design, build, and maintain end-to-end incident response playbooks within our SOAR platform
• Write custom automation logic using low-code tools and pro-code scripting
• Connect security tools via REST APIs, webhooks, and event-driven architecture
• Partner with the SOC team to translate manual triage steps into automated actions
• Leverage frontier LLMs to enhance automation intelligence and code generation

Job description

AnaVation LLC is seeking a Security Automation (SOAR) Engineer to build, optimize, and scale automated incident response workflows. You will bridge security operations and software engineering using low-code/pro-code tools and AI to cut response times and strengthen threat posture.

Responsibilities include designing playbooks, writing automation logic, API integrations, and translating triage steps into automated actions while leveraging frontier LLMs to improve automation quality.