Senior Security Automation Engineer (SOAR)

Bank of America Corporation•Washington, DC

28d

About The Position

We are seeking a highly skilled and experienced Senior Security Automation Engineer to lead the design, implementation, and optimization of security automation workflows using the Tines platform. This role requires deep technical expertise in security orchestration, cloud architecture, and API integrations, as well as experience working closely with Security Operations Centers (SOC), Incident Response (IR) teams, and cross-functional stakeholders. The ideal candidate will bring a strong security engineering background, hands-on experience with modern automation platforms, and a strategic mindset to drive scalable and secure automation initiatives.

Requirements

8+ years of experience in cybersecurity, with at least 3+ years in a security automation or engineering role.
Proven experience working with SOC and/or Incident Response teams to operationalize automation.
Hands-on experience with Tines or similar SOAR platforms (e.g., Splunk SOAR, Palo Alto XSOAR).
Strong programming skills in Python; experience with Git and CI/CD pipelines.
Deep understanding of REST APIs, webhooks, and secure API integrations.
Experience with cloud platforms (AWS, Azure, or GCP), including automation and security architecture.
Experience configuring secure tunnels (e.g., Cloudflare, SSH, VPN) for hybrid environments.
Strong knowledge of security frameworks and best practices (e.g., NIST, MITRE ATT&CK).
Excellent communication skills and ability to translate technical concepts for non-technical stakeholders.
Experience with Agile/Scrum methodologies and tools like Jira and Confluence.

Nice To Haves

CISSP, GIAC, or equivalent security certification.
Tines certifications (both entry-level and advanced preferred).
AWS Certified Security - Specialty or equivalent cloud security certification.
Familiarity with AI/ML integrations (e.g., AWS Bedrock, OpenAI APIs) is a plus.

Responsibilities

Architect, implement, and maintain advanced automation workflows using Tines.
Collaborate with SOC and IR teams to identify high-impact use cases for automation.
Integrate Tines with enterprise systems including EDR, SIEM, threat intelligence platforms, and cloud services.
Lead secure integration of Tines with SSO, credential vaults, and external repositories.
Design and configure secure connectivity solutions (e.g., Cloudflare tunnels, VPNs) for hybrid environments.
Develop and maintain orchestration stories across platforms such as: CrowdStrike, Tanium, Splunk, Anvilogic, ThreatQ, AWS, and Azure.
Write, test, and debug Python-based automation logic.
Analyze Tines logs and metrics to optimize performance and reliability.
Create and maintain technical documentation, runbooks, and architectural diagrams.
Engage with stakeholders across security, infrastructure, and application teams to gather requirements and align automation efforts with business goals.
Ensure all automation workflows adhere to enterprise security policies and change management processes.