Security Automation Specialist / SOAR Consultant

International Pharmaceutical Company looking for a Security Automation Specialist / SOAR Consultant to support security operations, automation, and incident response processes within a large enterprise environment.

• 2–3 years of experience in Security Operations, Security Engineering, Security Automation, SOC, or a similar area.
• Hands-on experience with at least one SOAR platform, e.g. Torq, Palo Alto XSOAR, Splunk SOAR, Tines, Swimlane, or similar.
• Good understanding of SOC processes and incident response workflows.
• Experience with REST APIs, JSON, authentication mechanisms, and webhooks.
• Experience with at least one SIEM platform such as Microsoft Sentinel, Splunk, QRadar, or Elastic.
• Knowledge of EDR technologies such as CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, or Carbon Black.
• Scripting skills in Python, PowerShell, or similar.
• Familiarity with Azure, AWS, or GCP.
• Very good communication skills and ability to work independently in an international environment.
• Fluent English.

• Designing, maintaining, and improving automated security workflows within a SOAR environment.
• Supporting SOC and incident response processes through automation.
• Handling security-related tickets, operational requests, and workflow issues.
• Automating use cases such as phishing, malware, suspicious authentication activity, and other security alerts.
• Integrating security tools using REST APIs, webhooks, and custom connectors.
• Enriching alerts with data from SIEM, EDR, identity, ticketing, and threat intelligence platforms.
• Troubleshooting and optimizing existing security automations.
• Working with security teams to identify processes that can be automated and improved.
• Building hands-on expertise in Torq as part of the project.

Only candidates located in Poland are eligible to work remotely. Cooperation model: B2B. Working hours 3:00 PM–11:00 PM Polish time. Recruitment process involves 2-3 online interviews.