[Remote] Information Security Engineer – (SOAR)

Note: The job is a remote job and is open to candidates in USA. BinaryBees Business Solutions LLC is seeking an Information Security Engineer specializing in Security Automation and Response. The role advances Security Operations through SOAR playbook development, automation, AI-driven workflows, threat detection, incident response, and improved SOC visibility and efficiency.

Responsibilities

• Develop, implement, and maintain SOAR playbooks to automate repetitive security tasks, including alert triage, threat investigation, and incident response, using tools like SOAR, Python, and API integrations
• Advance Security Operations capabilities through AI-driven initiatives, in collaboration with the Information Security Operations Manager
• Investigate malware, intrusions, unauthorized access, and data infiltration/exfiltration events
• Analyze logs, memory, disk images, and network captures to determine attack scope and impact
• Stay current on cyber threats and industry best practices to continuously enhance SOC capabilities
• Work with SIEM platforms and associated query languages (Yara-L, CQL, SPL,etc.)
• Participate in Purple Team activities
• Participate in on-call rotation and respond to critical security events

Skills

• Must be US Citizen or Green Card
• Hands-on experience automating repetitive security tasks using SOAR tools, Python, and API integrations
• Threat detection development and SOAR automation knowledge, with IR experience
• Strong SIEM knowledge, including query languages: Yara-L, CQL, SPL, etc
• Experience supporting AI-driven security operations initiatives
• Prior experience developing SOAR playbooks (not just using pre-built ones)
• Has created processes using SOAR automation
• Helped a SOC gain more visibility with logs
• Has developed detections
• BS or BA in Computer Science, Engineering, or equivalent education, training, or work experience
• 5+ years of security experience, or equivalent training and education
• Solid knowledge of computing systems, data network communications, and network architecture
• Hands-on experience with SOAR playbook development
• Required scripting or programming skills (Python, PowerShell, Go,etc.)
• Experience in incident response and threat investigation
• Experience in threat detection and understanding of logging systems
• Effective written and verbal communication skills
• Security certifications (GIAC, CISSP) preferred

Benefits

• 100% remote / fully remote work arrangement

Company Overview