Sr. Automation & Cybersecurity Engineer

Calance, Inc.; Plano (TX); Remote; USD 200,579,000 - 243,560,000; Full time

Benefits offered by this job

EPO/PPO Medical Plan (Anthem)

HMO/PPO Dental programs (Anthem)

Vision - VSP (MetLife)

401K VOYA Retirement vesting program

Job summary

Calance, Inc. seeks a Sr. Automation & Cybersecurity Engineer to lead automation in a modern SOC from Plano, TX with remote options.

You will own automated detection, enrichment, triage, and response workflows, and explore AI-assisted capabilities to reduce analyst toil. Design and scale automation across SIEM/SOAR platforms (Microsoft Sentinel/Defender/XDR, Azure Logic Apps, Tines, ServiceNow) and integrate with Python, PowerShell, APIs, and cloud services.

Qualifications

• 6–9 years of cybersecurity engineering experience, with 3–4 years focused on security automation or SOC engineering.
• Strong proficiency in Python, PowerShell, APIs, and cloud automation patterns.
• Hands-on experience with enterprise SIEM/SOAR platforms (Microsoft Sentinel preferred).
• Solid understanding of threat detection, logging pipelines, and incident response workflows.

Responsibilities

• Design, build, and maintain automation for alert enrichment, correlation, triage, incident response, and case handoffs across SIEM/SOAR platforms.
• Develop integrations using Python, PowerShell, APIs, and cloud-native services with production-grade error handling and documentation
• Collaborate with SOC analysts and incident responders to identify automation opportunities and reduce false positives
• Design AI-assisted and agentic workflows for investigation and decision support, ensuring human-in-the-loop controls and auditability
• Mentor team members and establish reusable automation standards through code/design reviews

Skills

Python

PowerShell

APIs

Cloud automation

SIEM/SOAR

Threat detection

Incident response

Tools

Microsoft Sentinel

Defender/XDR

Azure Logic Apps

Tines

ServiceNow

Job description

Job Title

Sr. Automation & Cybersecurity Engineer - ID: 45080

Duration

1 year

Start Date

ASAP

Location

Plano, TX (Remote)

Work Arrangement

Remote

Client

Our Client: A global leader in secure, large-scale technology operations, is seeking a Sr. Automation & Cybersecurity Engineer. This role offers the chance to architect next-generation SOC automation and AI-assisted security workflows at the forefront of cyber defense innovation.

Position

Sr. Automation & Cybersecurity Engineer

Role Summary

Join a dynamic team driving the future of security operations by designing and scaling automation that powers a modern SOC. In this high-impact role, you'll own automated detection, enrichment, triage, and response workflows—while piloting emerging AI and agentic capabilities that reduce analyst toil and strengthen incident response. You'll partner closely with detection engineers, incident responders, and platform owners to transform manual processes into reliable, governed automation. This is a rare opportunity to blend deep engineering skill with practical cybersecurity judgment, shaping how security teams operate at scale.

Responsibilities

• Design, build, and maintain automation for alert enrichment, correlation, triage, incident response, and case handoffs across SIEM/SOAR platforms (Microsoft Sentinel, Defender/XDR, Azure Logic Apps, Tines, ServiceNow)
• Develop integrations using Python, PowerShell, APIs, and cloud-native services with production-grade error handling and documentation
• Collaborate with SOC analysts and incident responders to identify automation opportunities and reduce false positives
• Design AI-assisted and agentic workflows for investigation and decision support, ensuring human-in-the-loop controls and auditability
• Mentor team members and establish reusable automation standards through code/design reviews

Ideal Candidates Will Have

• A passion for building scalable, governed automation that measurably improves SOC efficiency
• Strong instincts for balancing innovation (AI/agentic workflows) with security and auditability
• A collaborative mindset for working across detection, response, and platform teams

Required Skills/Experience

• 6–9 years of cybersecurity engineering experience, with 3–4 years focused on security automation or SOC engineering
• Strong proficiency in Python, PowerShell, APIs, and cloud automation patterns
• Hands‑on experience with enterprise SIEM/SOAR platforms (Microsoft Sentinel preferred)
• Solid understanding of threat detection, logging pipelines, and incident response workflows

Other Skills

• Experience with Tines or agentic workflow orchestration
• Familiarity with LLM/AI agents for security enrichment and triage
• Knowledge of detection-as-code, MITRE ATT&CK, Sigma rules, or CI/CD pipelines
• Certifications such as Microsoft Cybersecurity Architect or Azure Security Engineer Associate

Benefits

• EPO/PPO Medical Plan (Anthem)
• HMO/PPO Dental programs (Anthem)
• Vision - VSP (MetLife)
• 401K VOYA Retirement vesting program

About Calance

Calance is a global IT company with operations in the United States, Canada, and India. Over the years, Calance has grown organically and has acquired numerous successful IT Services firms along the way. As a result, the company today is a mix of diverse cultures, talents, and expertise that collaborate globally to bring our best capabilities and thinking to clients. Calance also offers benefits which includes Medical, Dental, Vision care, and 401K.

Calance - the place to grow.

www.calance.com

Pay Range

Pay Range - $70.00-85.00/hr W2