Note: The job is a remote job and is open to candidates in USA. BinaryBees Business Solutions LLC is hiring an Information Security Engineer – Security Automation and Response to advance security operations through SOAR playbook development, automation, and AI-driven workflows. The role focuses on automating incident response, investigating threats, developing detections, analyzing security data, and improving SOC operational efficiency in a fully remote position.
Responsibilities
- Develop, implement, and maintain SOAR playbooks to automate repetitive security tasks, including alert triage, threat investigation, and incident response, using tools like SOAR, Python, and API integrations
- Advance Security Operations capabilities through AI-driven initiatives, in collaboration with the Information Security Operations Manager
- Investigate malware, intrusions, unauthorized access, and data infiltration/exfiltration events
- Analyze logs, memory, disk images, and network captures to determine attack scope and impact
- Stay current on cyber threats and industry best practices to continuously enhance SOC capabilities
- Work with SIEM platforms and associated query languages (Yara-L, CQL, SPL,etc.)
- Participate in Purple Team activities
- Participate in on-call rotation and respond to critical security events
Skills
- SOAR playbook development — hands-on experience automating repetitive security tasks using SOAR tools, Python, and API integrations
- Threat detection development and SOAR automation knowledge, with IR experience
- Strong SIEM knowledge, including query languages: Yara-L, CQL, SPL, etc
- Experience supporting AI-driven security operations initiatives
- Prior experience developing SOAR playbooks (not just using pre-built ones)
- Has created processes using SOAR automation
- Helped a SOC gain more visibility with logs
- Has developed detections
- BS or BA in Computer Science, Engineering, or equivalent education, training, or work experience
- 5+ years of security experience, or equivalent training and education
- Solid knowledge of computing systems, data network communications, and network architecture
- Hands-on experience with SOAR playbook development
- Required scripting or programming skills (Python, PowerShell, Go, etc.)
- Experience in incident response and threat investigation
- Experience in threat detection and understanding of logging systems
- Effective written and verbal communication skills
- Security certifications (GIAC, CISSP) preferred
Benefits
- 100% Remote
Company Overview