Information Security Engineer – Security Automation & Response (SOAR)

TalentFish is a company seeking an Information Security Engineer – Security Automation & Response (SOAR) for a fully remote position. The role focuses on building, automating, and improving Security Operations capabilities, including developing SOAR playbooks and enhancing detection capabilities.

Responsibilities:

• Design, develop, and maintain SOAR playbooks to automate security operations processes
• Automate repetitive security tasks including alert triage, investigation workflows, and incident response activities
• Build integrations and workflows using Python, APIs, and security automation technologies
• Support security investigations, threat hunting, and incident response efforts
• Develop and improve security detections within SIEM platforms
• Analyze security events and enhance monitoring capabilities through better logging and visibility
• Support Security Operations initiatives focused on automation, efficiency, and AI-driven security improvements
• Create and improve security processes, documentation, and operational playbooks
• Collaborate with internal security teams and external security partners to advance SOC capabilities

Requirements:

• 4+ years of experience in cybersecurity, Security Operations, incident response, or related security engineering roles
• Hands-on experience developing SOAR playbooks and security automation workflows
• Strong Python scripting skills with the ability to create automation solutions and API integrations
• Experience integrating security tools and automating repetitive security processes
• Strong understanding of incident response, threat detection, and security investigations
• Experience working with SIEM platforms and developing queries/detections using languages such as: SPL, YARA-L, CQL, Other security query languages
• Experience improving SOC visibility through log analysis, detection development, and automation
• Ability to investigate security alerts, identify threats, and support incident response activities
• Strong communication skills with the ability to collaborate across technical and business teams
• A builder mindset — someone who enjoys creating, improving, and evolving security capabilities