5 months ago
Tel Aviv-Yafo, IsraelMid Level
Responsibilities
- Design and develop automation workflows for incident response and SOC operations.
- Identify and eliminate manual processes through scalable automation.
- Build reusable, maintainable automation components and patterns.
- Develop security-platform integrations and process data across multiple systems.
- Evaluate, select, and implement SOAR and automation platforms.
- Design the team’s automation architecture and integration strategy in a greenfield environment.
- Partner with SOC analysts and incident responders to translate operational needs into automation solutions.
- Improve end-to-end detection and response workflows.
- Build and evaluate AI, LLM, and agent-based workflows for security enrichment, triage, and response, taking successful prototypes toward production.
Requirements
- At least three years of hands-on experience with SOAR platforms such as Torq, Cortex XSOAR, Splunk SOAR, or similar.
- Strong hands-on Python experience or experience with a comparable programming language.
- Experience designing or implementing automation frameworks or workflows.
- Experience building integrations with REST APIs and web services.
- Experience working with SIEM, EDR/XDR, ticketing, or comparable security tools.
- Experience with at least one cloud platform: Azure, AWS, or GCP.
- Solid understanding of incident-response processes and SOC alert-handling workflows.
- Experience with at least one SIEM platform, such as Splunk, Sentinel, QRadar, or CrowdStrike.
- Experience with CI/CD pipelines and DevOps practices is a bonus.
- Familiarity with cloud-native services and architecture is a bonus.
- Hands-on exposure to AI/ML, LLMs, or agent-based systems is a bonus.
- Applicants must be authorized to work in the country where they apply.
Benefits
- Competitive compensation (amount not specified).
- Career growth and learning opportunities.
- Flexibility and work-life balance.
- Collaborative and innovative culture.
- Opportunity to work on impactful AI projects.
- International environment and talented teams.
- Applicants must be authorized to work in the country where they apply and provide proof of employment eligibility.
Tech Stack
Categories
About Nebius
Nebius builds a full-stack AI cloud offering GPU compute, storage, and tools for training and deploying ML models for startups, enterprises, and research labs. It sells consumption-based cloud infrastructure (IaaS/PaaS) and managed services tailored to generative AI workloads, including large-scale model training and inference. The company is headquartered in Amsterdam and operates as an independent provider.