Назад
8 дней назад

Lead Security Automation Engineer (AI/SOAR)

Формат работы
onsite
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
Israel
Вакансия из списка Hirify.GlobalВакансия из Hirify RU Global, списка компаний с восточно-европейскими корнями
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Lead Security Automation Engineer (AI/SOAR): Building and scaling SOC automation across SIEM, EDR, SOAR, and security infrastructure with an accent on Python integrations, incident-response workflows, and greenfield architecture. Focus on designing event-driven automation, developing AI/LLM-assisted enrichment and response workflows, and shaping the team's automation platform strategy.

Location: Israel

Company

Nebius builds a full-stack AI cloud platform for data processing, model training, and production deployment, with infrastructure spanning compute, storage, networking, and applied AI.

What you will do

  • Design and develop automation workflows for incident response and SOC operations.
  • Build reusable automation components and eliminate manual processes through scalable solutions.
  • Develop integrations using REST APIs, webhooks, event-driven architectures, data parsing, enrichment, and transformation.
  • Lead or contribute to SOAR platform evaluation, selection, implementation, and integration architecture.
  • Partner with SOC analysts and incident responders to improve detection and response workflows.
  • Build and evaluate AI, LLM, and agent-based workflows for enrichment, triage, and response.

Requirements

  • At least 3 years of hands-on experience with SOAR platforms such as Torq, Cortex XSOAR, Splunk SOAR, or similar.
  • Strong hands-on Python experience or proficiency in a comparable language.
  • Experience designing automation frameworks and workflows, including integrations with REST APIs and web services.
  • Experience with SIEM, EDR/XDR, ticketing systems, and at least one SIEM platform such as Splunk, Sentinel, QRadar, or CrowdStrike.
  • Experience with at least one cloud platform: Azure, AWS, or GCP.
  • Solid understanding of incident response and SOC alert-handling workflows.

Nice to have

  • Experience with CI/CD pipelines, DevOps practices, and cloud-native services.
  • Hands-on exposure to AI/ML, LLMs, or agent-based systems.
  • Strong engineering mindset, proactive problem-solving, attention to detail, and effective collaboration with technical and operational colleagues.

Culture & Benefits

  • Competitive compensation and career growth opportunities.
  • Learning opportunities, flexibility, and ownership.
  • Collaborative and innovative international environment.
  • Opportunity to work on impactful AI projects with experienced engineering teams.
  • Fast-moving environment focused on bold thinking, meaningful impact, and shaping the future of AI.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →