Senior Automation Engineer (SOAR) - Mid-Atlantic region (Remote)
GuidePoint Security2 months ago
Responsibilities
- Design and build security automation and orchestration workflows for SOC operations.
- Integrate security and IT systems using REST APIs, webhooks, and JSON.
- Develop custom workflow logic, data transformations, error handling, conditional logic, and secure execution using Python.
- Decompose manual security processes into reliable automated workflows.
- Scope automation requirements with clients and translate them into build plans.
- Apply emerging AI, LLM, and agentic coding tools to improve automation and business outcomes.
- Support detection engineering and automation-as-code practices when applicable.
Requirements
- At least 5 years of experience in security operations with end-to-end SOC knowledge, including alert triage, escalation, incident response, and case management.
- At least 3 years of experience designing and building security automation or orchestration workflows.
- Hands-on experience with at least one SOAR or automation platform; Tines, Torq, or Cortex XSOAR are highly preferred.
- Proficiency with REST APIs, webhooks, JSON, and Python scripting.
- Working knowledge of SIEM, EDR/XDR, ticketing, threat intelligence, and email security tooling.
- Familiarity with LLMs, AI-assisted or agentic coding tools such as Claude Code or Codex, and preferably MCP-based integrations.
- Cloud experience with AWS or Azure and familiarity with cloud-native security tooling.
- Preferred experience in consulting, professional services, or an MSSP environment.
- Preferred exposure to detection engineering, detections-as-code, Sigma, Git, and automation-as-code practices.
- Platform, vendor, SIEM, or EDR certifications such as Tines, Torq, Cortex XSOAR, Splunk, Microsoft Sentinel, or CrowdStrike are preferred.
Benefits
- Primarily remote U.S.-based work; some travel or on-site work may be required for certain positions.
- Medical insurance options including a zero-deductible PPO and a high-deductible health plan with HSA.
- GuidePoint pays 90% of employee PPO premiums, 70% of family PPO premiums, 100% of employee HDHP premiums, and 75% of family HDHP premiums.
- HSA contributions are available for eligible employees enrolled in the high-deductible plan.
- Dental insurance with premiums paid at 100% for employees and 75% for family plans.
- Twelve corporate holidays and a Flexible Time Off program.
- Mobile phone and home internet allowance.
- Retirement plan eligibility after two months at open enrollment.
- Pet benefit option.
About GuidePoint Security
GuidePoint Security provides cybersecurity consulting, managed services, and value-added reselling/integration of security products for enterprises and U.S. public-sector agencies. Its teams deliver assessments, penetration testing, cloud and application security, identity and access management, endpoint and network protection, and governance services. Founded in 2011 and headquartered in Reston, Virginia, the privately held company serves Fortune 500 organizations and cabinet-level federal agencies.