# Security Automation Engineer (SOAR) - Mid-Atlantic region (Remote)

**Company**: GuidePoint Security
**Location**: Remote
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Consulting

**Apply**: https://job-boards.greenhouse.io/guidepointsecurity/jobs/6017633004?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_caf266f1-4b0

## Description

GuidePoint Security is seeking a Security Automation Engineer (SOAR) to work remotely in the Mid-Atlantic region.

As a Security Automation Engineer, you will play a critical role in designing and building security automation and orchestration workflows to help organizations optimize resources and integrate best-fit solutions that mitigate risk.

**Required Qualifications:**

- 5+ years of experience in security operations with a working understanding of how a SOC functions end-to-end (alert triage, escalation, incident response, case management)

- 3+ years of experience designing and building security automation and orchestration workflows

- Hands-on experience with at least one SOAR/automation platform (Tines, Torq, or Cortex XSOAR highly preferred)

- Proficiency integrating security and IT systems via REST APIs, webhooks, and JSON

- Scripting ability, primarily Python, for custom logic, data transforms, and handling within automated workflows

- Working knowledge of the tooling categories automations connect to: SIEM, EDR/XDR, ticketing (ServiceNow, Jira), threat intelligence, and email security

- Ability to decompose a manual security process into a reliable automated workflow, including error handling, conditional logic, and secure runs

**Preferred Qualifications:**

- Familiarity using LLMs in a development and automation context, including AI-assisted or agentic coding tools such as Claude Code or Codex

- Exposure to MCP-based integrations

- Platform or vendor certifications: Tines, Torq, Cortex XSOAR, or SIEM/EDR certs (such as Splunk, Microsoft Sentinel, CrowdStrike)

- Cloud experience (AWS or Azure) and familiarity with cloud-native security tooling

- Prior delivery experience in a consulting, professional services, or MSSP environment

- Detection engineering exposure in areas such as detections-as-code (DaC), Sigma, or similar

- Version control and automation-as-code practices (Git or similar repo controls)

**Benefits:**

- Remote workforce primarily (U.S.-based only, some travel may be required for certain positions)

- Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA

- Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans

- 12 corporate holidays and a Flexible Time Off (FTO) program

- Healthy mobile phone and home internet allowance

- Eligibility for retirement plan after 2 months at open enrollment

- Pet Benefit Option

## Skills

### Required
- SOAR
- security automation
- orchestration workflows
- REST APIs
- webhooks
- JSON
- Python scripting
- SIEM
- EDR/XDR
- threat intelligence
- email security

### Nice to have
- LLMs
- AI-assisted coding tools
- MCP-based integrations
- cloud experience
- cloud-native security tooling
- detection engineering
- version control
- automation-as-code practices

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/guidepointsecurity/jobs/6017633004?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)