> Markdown version of [/jobs/ext/1318810-information-security-engineer-security-automation-and-response](https://www.wearedevelopers.com/jobs/ext/1318810-information-security-engineer-security-automation-and-response). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Engineer - Security Automation and Response - **Company:** UChicago Medicine - **Location:** Darien, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cyber Security, Computer Programming, Computer Networks, Query Languages, Intrusion Detection and Prevention, Python (Programming Language), Log Analysis, Network Architecture, Windows PowerShell, Security Information and Event Management, Data Logging, Scripting, Computerised Systems, Information Technology, Cybercrime, Purple Team (Cyber Security), Api Management, Security Orchestration, Automation & Response, Golang - **Published:** July 17, 2026 - **Apply:** https://www.dice.com/job-detail/bf665da2-db75-4267-9ea8-c160574cb6c1 ## About the Role * BS or BA degree, Computer Science, Engineering, or equivalent education, training or work experience * 5 years of Security experience, or equivalent training and education * Knowledge of computing systems, data network communications, and network architecture * Effective written and verbal communication skills * Experience in SOAR playbook development * Scripting or programming skills (Python, PowerShell, Go, etc.) required. * Experience in Incident Response and Threat investigation. * Experience in Threat detection * Understanding of logging systems * Security related certifications are preferred. (GIAC, CISSP), The pay range is based on a full-time equivalent (1.0 FTE) and is reflective of current market data, reviewed on an annual basis. Compensation offered at the time of hire will vary based on candidate qualifications and experience and organizational considerations, such as internal equity. Pay ranges for employees subject to Collective Bargaining Agreements are negotiated by the medical center and their respective union. ## Description Join one of the nation's most comprehensive academic medical centers, UChicago Medicine as an Information Security Engineer - Security Automation and Response for the Information Security department. This is a remote, work from home opportunity, and you may be based outside of the greater Chicagoland area. Under general direction of the Information Security Operations Manager, implementing, deploying, and optimizing Automation using SOAR playbook development, Logging, AI driven workflows, streamline incident response, and improve SOC operational efficiency. Participate in threat investigation and Incident response. Essential Job Functions * Develop, implement, and maintain SOAR playbooks to automate repetitive security tasks, such as alert triage, threat investigation, and incident response, using tools like SOAR, Python, and API integrations. * Knowledge of threat detection development, automation of SOAR development, and Incident Response. * Support initiatives working with Information Security Operations Manager to advance Security Operations capabilities using AI. * Investigate malware, intrusions, unauthorized access, and data infiltration and exfiltration events * Analyze logs, memory, disk images, and network captures to determine attack scope and impact * Dedicate efforts to staying informed on cyber threats and standard processes to consistently enhance Security Operations Center capabilities * Excellent knowledge of security information and event management (SIEM) platforms including query language (Yara-L, CQL, SPL, etc.) * Participate in Purple Team activity. * Participate in on-call rotation and respond to critical security events ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) ## Related Articles - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)