Security Automation Engineer

TransUnion • Crum Lynne, PA

1d • $112,500 - $187,500 • Hybrid

About The Position

The SOAR Development team designs and delivers automation capabilities that strengthen Security Operations Center response and reduce manual effort for security analysts. The team works across security operations, detection engineering, and supporting technology teams to build scalable, AI-driven security solutions within a global and distributed environment. This role reports to the Information Security Engineering Manager. This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

Requirements

• 10+ years of experience in security engineering, security automation, or software engineering with a strong cybersecurity focus.
• Hands-on experience with SOAR or security automation platforms such as Splunk SOAR, Cortex XSOAR, Tines, Torq, or similar technologies.
• Experience building solutions with modern Large Language Model platforms such as Anthropic Claude, OpenAI, Amazon Bedrock, or similar platforms, including agent design, prompt design, tool-use patterns, and model-output evaluation.
• Working knowledge of Security Operations Center operations, incident response workflows, and the MITRE ATT&CK framework.
• Strong software engineering fundamentals, documentation practices, written communication skills, and experience working effectively within a distributed global team.
• Strong production-level Python development experience.
• Experience developing and integrating REST APIs, JSON-based services, webhooks, and event-driven solutions.
• Knowledge of authentication and secure integration patterns, including OAuth, API keys, and secrets management.
• Experience with Git-based development, code review, automated testing, and Continuous Integration and Continuous Delivery practices.
• Hands-on experience using APIs, Software Development Kits, and tool-use patterns to build LLM-powered tools, integrations, workflows, or agents.

Nice To Haves

• Experience building autonomous or semi-autonomous agent systems or working with agentic AI security platforms in production.
• Experience with LLM fine-tuning, systematic evaluations, safety testing, or red-teaming.
• Exposure to Splunk Enterprise Security, Search Processing Language, detection logic, or detection-as-code practices.
• Experience with ServiceNow or similar case management and ITSM platforms, along with web-service frameworks such as FastAPI or Flask.
• Knowledge of AWS, Docker, Kubernetes, Terraform, DevOps practices, front-end development, or experience mentoring engineers and leading technical workstreams.

Responsibilities

• Lead the design, development, and maintenance of security response automations on the agentic AI SOC platform, including the migration of existing Splunk SOAR playbooks.
• Build agentic workflows from end to end, including prompt and agent design, tool integration, guardrails, output evaluation, and human-in-the-loop review for AI-driven triage and response.
• Develop and maintain integrations across SIEM, EDR, threat intelligence, case management, and ITSM platforms using REST APIs, webhooks, and event-driven patterns.
• Build internal tools, services, and APIs primarily in Python to expand platform capabilities and reduce repetitive work for security analysts.
• Administer and improve the case management platform and its supporting workflows.
• Partner with detection engineering teams to convert new security detections into automated response workflows.
• Contribute to shared engineering standards through Git-based development, code reviews, automated testing, and CI/CD practices.
• Measure the effectiveness of automation through throughput, mean time to respond or remediate, false-positive burden, and analyst time saved.
• Create clear technical documentation and runbooks while collaborating across a global, distributed team.

Benefits

• Day-one eligibility for medical, dental, and vision coverage, plus supplemental plan options.
• Spousal, domestic partner, and other eligible dependent coverage is available on select plans.
• Tax-advantaged HSA and FSA accounts.
• Company-paid basic life and AD&D.
• Optional voluntary life and AD&D for you and your family.
• Short- and long-term disability.
• Optional legal plan, pet insurance, and travel accident coverage.
• Adoption assistance.
• Fertility planning coverage.
• Caregiver support.
• Dependent Care FSA for possibility of an employer match.
• Complimentary Care@Work membership.
• Up to 12 weeks of paid parental leave with eligibility for a thoughtful, gradual return.
• 401(k) with employer match.
• Employee Stock Purchase Plan (ESPP).
• Financial wellness resources.
• Career coaching.
• Optional long-term care insurance.
• Tuition reimbursement.
• Flexible time off for exempt employees or paid time off for nonexempt employees.
• Up to 12 paid holidays per year.
• Commuter benefits.
• Employee discounts.
• Charitable gift matching.
• Paid volunteer time off.
• Corporate volunteer events.
• 24/7 support including professional therapy, coaching, and emotional well-being programs.
• Guided meditation and resources that support physical, mental, social, and financial wellness.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed