3 months ago
Tel Aviv-Yafo, IsraelMid Level
Responsibilities
- Design and develop automation workflows for incident response and SOC operations.
- Identify and eliminate manual processes through scalable automation.
- Build reusable, maintainable automation components and patterns.
- Develop security-platform integrations and process data across multiple systems.
- Evaluate, select, and implement SOAR and automation platforms.
- Design the team’s automation architecture and integration strategy in a greenfield environment.
- Partner with SOC analysts and incident responders to translate operational needs into automation solutions.
- Improve end-to-end detection and response workflows.
- Build and evaluate AI, LLM, and agent-based workflows for security enrichment, triage, and response, taking successful prototypes toward production.
Requirements
- At least three years of hands-on experience with SOAR platforms such as Torq, Cortex XSOAR, Splunk SOAR, or similar.
- Strong hands-on Python experience or experience with a comparable programming language.
- Experience designing or implementing automation frameworks or workflows.
- Experience building integrations with REST APIs and web services.
- Experience working with SIEM, EDR/XDR, ticketing, or comparable security tools.
- Experience with at least one cloud platform: Azure, AWS, or GCP.
- Solid understanding of incident-response processes and SOC alert-handling workflows.
- Experience with at least one SIEM platform, such as Splunk, Sentinel, QRadar, or CrowdStrike.
- Experience with CI/CD pipelines and DevOps practices is a bonus.
- Familiarity with cloud-native services and architecture is a bonus.
- Hands-on exposure to AI/ML, LLMs, or agent-based systems is a bonus.
- Applicants must be authorized to work in the country where they apply.
Benefits
- Competitive compensation (amount not specified).
- Career growth and learning opportunities.
- Flexibility and work-life balance.
- Collaborative and innovative culture.
- Opportunity to work on impactful AI projects.
- International environment and talented teams.
- Applicants must be authorized to work in the country where they apply and provide proof of employment eligibility.
Tech Stack
Categories
About Nebius
The Nebius AI Cloud brings powerful full-stack infrastructure for AI developers and practitioners across startups, enterprises and science institutes to build and deploy generative AI applications and rapidly deliver scientific breakthroughs by training and running ML models within a secure, high-performance, and cost-optimized cloud environment.