SOC Automation Engineer

Summary/Objective

We're hiring a SOC Automation Engineer! Are you a developer with a SecOps mindset? We are looking for an automation expert to build complex SOAR playbooks, integrate AI into our workflows, and write Python/PowerShell scripts to reduce analyst fatigue. If you have a background in incident response and a passion for automation (Torq experience is a huge plus!), check out the JD below!

Key Responsibilities:

• SOAR Development: Design, build, test, and maintain complex automation playbooks within our SOAR (Security Orchestration, Automation, and Response) platform to handle alert triage, containment, and remediation.
• Custom Scripting: Develop and maintain robust scripts using Python and PowerShell to automate routine SOC tasks, parse logs, and streamline daily operations, directly reducing analyst fatigue.
• AI Integration: Spearhead the adoption and safe integration of AI technologies and Large Language Models (LLMs) into our security workflows to assist with alert summarization, threat intelligence parsing, and automated decision-making.
• API Integrations: Build and manage custom API integrations between disparate security tools (SIEM, EDR, Firewalls, Threat Intel platforms) to ensure seamless data flow and orchestration.
• Process Engineering: Collaborate closely with Tier 1 and Tier 2 analysts to identify bottlenecks, manual pain points, and repetitive tasks that are prime candidates for automation.
• Metrics & Optimization: Track and report on the effectiveness of automations, focusing on measurable improvements to key SOC metrics like Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).
• Incident Response Support: Leverage your background in alert handling and forensics to jump into high-severity incidents when necessary

Required Qualification

• 3 Minimum years of experience
• Development Skills: Strong, proven proficiency in Python and PowerShell
• Security Operations Experience: Hands-on experience working in a SOC environment, with a solid understanding of Incident Response (IR), alert handling, and basic digital forensics
• SOAR Expertise: Proven experience developing playbooks and integrations in enterprise SOAR platforms (Experience with the Torq security automation platform is a strong advantage)
• API & Systems Knowledge: Deep understanding of RESTful APIs, JSON/XML parsing, webhooks, and how to securely interact with third-party applications

.

Work Environme

ntThis job operates in a professional office environment. This role routinely uses standard office equipment such as laptop computers, photocopiers and smartphone

s.Physical Deman

dsWhile performing the duties of this job, the employee is regularly required to talk or hear. Specific vision abilities required by this job include close vision and ability to adjust focus. This would require the ability to lift files, open filing cabinets and bend or stand on a stool as necessary. The employee is occasionally required to stand; walk; use hands to finger, handle, or feel objects, tools, or controls; reach with hands and arms; and stoop, kneel, crouch or crawl. The employee may be required to life up to 25 lb

s.Position Type/Expected Hours of Wo

rkThis is a full-time position. Days and hours of work are Monday through Friday during normal business hours. Occasional evening and weekend work may be required as job duties deman

d.Trav

elMinimal trav

elOther Duti

esPlease note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notic

e.EEO Stateme

ntPaymentus is an equal opportunity employer. We enthusiastically accept our responsibility to make employment decisions without regard to race, religious creed, color, age, sex, sexual orientation, national origin, ancestry, citizenship status, religion, marital status, disability, military service or veteran status, genetic information, medical condition including medical characteristics, or any other classification protected by applicable federal, state, and local laws and ordinances. Our management is dedicated to ensuring the fulfillment of this policy with respect to hiring, placement, promotion, transfer, demotion, layoff, termination, recruitment advertising, pay, and other forms of compensation, training, and general treatment during employmen

t.Reasonable Accommodati

onPaymentus recognizes and supports its obligation to endeavor to accommodate job applicants and employees with known physical or mental disabilities who are able to perform the essential functions of the position, with or without reasonable accommodation. Paymentus will endeavor to provide reasonable accommodations to otherwise qualified job applicants and employees with known physical or mental disabilities, unless doing so would impose an undue hardship on the Company or pose a direct threat of substantial harm to the employee or other

s.An applicant or employee who believes he or she needs a reasonable accommodation of a disability should discuss the need for possible accommodation with the Human Resources Department, or his or her direct superviso

r.