Security Automation Engineer

Salary: $112,500 - 187,500 per year Requirements: We bring 10+ years of experience in security engineering, security automation, or software engineering with a strong cybersecurity emphasis. We have hands-on experience with SOAR or security automation platforms such as Splunk SOAR, Cortex XSOAR, Tines, Torq, or similar tools. We have experience building solutions on modern large language model platforms such as Anthropic Claude, OpenAI, Amazon Bedrock, or comparable technologies, including agent design, prompt creation, tool-use patterns, and output evaluation. We understand SOC operations, incident response workflows, and the MITRE ATT&CK framework. We have strong software engineering foundations, documentation habits, written communication skills, and experience working effectively in a distributed global team. We have strong production-level Python development experience. We have experience developing and integrating REST APIs, JSON-based services, webhooks, and event-driven solutions. We understand secure authentication and integration patterns, including OAuth, API keys, and secrets management. We have experience with Git-based development, code review, automated testing, and continuous integration and continuous delivery practices. We have hands-on experience using APIs, software development kits, and tool-use patterns to build LLM-powered tools, integrations, workflows, or agents. Responsibilities: We lead the design, development, and upkeep of security response automations on the agentic AI SOC platform, including migration of existing Splunk SOAR playbooks. We build end-to-end agentic workflows, covering prompt and agent design, tool integration, guardrails, output assessment, and human-in-the-loop review for AI-driven triage and response. We develop and maintain integrations across SIEM, EDR, threat intelligence, case management, and ITSM platforms using REST APIs, webhooks, and event-driven patterns. We build internal tools, services, and APIs primarily in Python to extend platform capabilities and reduce repetitive work for security analysts. We administer and enhance the case management platform and its supporting workflows. We partner with detection engineering teams to turn new security detections into automated response workflows. We contribute to shared engineering standards through Git-based development, code reviews, automated testing, and CI/CD practices. We measure automation effectiveness through throughput, mean time to respond or remediate, false-positive burden, and analyst time saved. We create clear technical documentation and runbooks while collaborating across a global, distributed team. Technologies: Agentic AI AI API CI/CD Git Support ITSM JSON LLM OAuth Python REST Security Splunk AWS Cloud DevOps Docker FastAPI Fine-tuning Flask Kubernetes ServiceNow Terraform Web More: We are TransUnion, and we are collaborating with hackajob to connect with exceptional professionals for this role. Our SOAR Development team designs and delivers automation capabilities that strengthen Security Operations Center response and reduce manual effort for security analysts. We work across security operations, detection engineering, and supporting technology teams to build scalable, AI-driven security solutions in a global, distributed environment. This is a hybrid position with regular virtual work plus in-person time at an assigned TransUnion office location for a minimum of two days each week. We offer a broad benefits package designed to support health, protection, family, future, everyday needs, and wellness from day one, along with a culture focused on growth, flexibility, collaboration, and making a positive impact. last updated 36 week of 2026