Security Automation Engineer

Responsibilities

• ▹Design and operate SOAR playbooks and agentic AI workflows that triage, enrich and respond to alerts with minimal human intervention
• ▹Translate detection logic and AI model outputs into actionable, low-noise alerts; tune thresholds and automate feedback loops
• ▹Build and maintain integrations between security tools (SIEM, EDR, TIP, identity platforms) and AI inference services via APIs, event streaming and orchestration frameworks
• ▹Instrument automation pipelines with metrics, logging and alerting
• ▹Write tests for playbooks and automation logic; run purple-team exercises and tabletop simulations
• ▹Partner with AI/ML, DevSecOps and IT teams to embed security automation into infrastructure change management

Requirements

• ▹5+ years in security engineering, SecOps, or automation roles
• ▹Proficiency in Python and/or Go for scripting and tooling
• ▹Hands-on SOAR experience (Splunk SOAR, Palo Alto XSOAR, Tines, or similar)
• ▹Experience with SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle)
• ▹REST API integration and event-driven architecture
• ▹Understanding of threat detection logic (MITRE ATT&CK, kill chain)
• ▹Familiarity with LLM/AI APIs and prompt-driven automation workflows
• ▹Version control and CI/CD practices (Git, GitHub Actions)
• ▹Cloud security fundamentals (AWS, Azure, or GCP)
• ▹Strong written documentation habits

Nice to have

• ▹Experience deploying or fine-tuning ML models for anomaly detection or NLP-based log analysis
• ▹Familiarity with agentic AI frameworks (LangChain, AutoGen, CrewAI, or similar)
• ▹Container and orchestration experience (Docker, Kubernetes)
• ▹Certifications: CISSP, AWS Security Specialty, or equivalent
• ▹Background in threat intelligence automation or CTI platform integration (MISP, OpenCTI)

Soft skills

About the company

AlphaSense delivers market intelligence and search built on trusted AI, drawing on public and private content such as equity research, company filings, expert calls and news. Following the 2024 acquisition of Tegus, it serves over 6,000 enterprise customers, headquartered in New York with 2,000+ employees across the US, UK, Finland, India, Singapore, Canada and Ireland.