> Markdown version of [/jobs/ext/1949796-soar-and-ai-engineer-managed-security](https://www.wearedevelopers.com/jobs/ext/1949796-soar-and-ai-engineer-managed-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SOAR and AI Engineer - Managed Security

- **Company:** AHEAD
- **Location:** United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, User Authentication, Cloud Computing Security, Cyber Security, Data Transformation, Identity and Access Management, Intrusion Detection and Prevention, Intrusion Detection Systems, JSON, Python (Programming Language), Regular Expressions, Security Information and Event Management, Systems Integration, Scripting, Firewalls (Computer Science), Cortex XSOAR Platform, Webhooks, Security Orchestration, Automation & Response, Vulnerability Analysis
- **Published:** August 6, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/soar-and-ai-engineer-managed-security-usa-58814837

## About the Role

belonging alert triage, and workflow decisioning * Establish guardrails and validation for AI-enabled workflows * Collaborate with SOC, SIEM, threat detection, and incident response teams on automation opportunities * Monitor, tune, and optimize automation platforms for reliability and performance * Build dashboards and metrics to track automation adoption and incident response improvements * Contribute to automation/AI roadmap and client onboarding activities Tasks * Strong experience with SOAR platforms (preferably Swimlane and Palo Alto XSOAR) * Security automation, orchestration, and systems integration experience * Proficiency in Python or other scripting languages for automation * Experience with APIs, webhooks, JSON, authentication, and event-driven integrations * Familiarity with SIEM platforms and security operations workflows * Knowledge of AI-assisted operations and practical uses of AI in security * Excellent verbal and written communication skills * Incident handling and aa
aaaaJ_ experience * Ability to work independently and collaboratively in a high-sensitivity environment * 2-4 years in Information Security, Incident Response, SOAR engineering, or related fields * Hands-on experience with IDS, Firewall, SIEM, SOAR, EDR, IAM, email security, and cloud security tools * Understanding of security threats, attack vectors, vulnerabilities, and exploits * Knowledge of regular expressions and data transformation concepts * Customer service oriented with professionalism and strong judgment Key requirements * Medical, Dental, and Vision Insurance * 401(k) * Paid holidays * Paid time off * Paid parental and caregiver leave * Plus more benefits

## Description

Experteer Overview In this role you will design, build, and continuously improve automation and AI-assisted workflows for AHEAD's 24/7 Managed Security operations. You'll work closely with SOC and engineering teams to translate analyst needs into scalable SOAR playbooks, integrations, and AI-enabled capabilities. The position focuses on accelerating incident handling, enrichment, and response through automation while ensuring security and auditability. It's an opportunity to shape security automation at scale within a culture that values belonging and cross-team collaboration. Compensation / Benefits * Design, develop, and maintain scalable security automation workflows in the SOAR platform * Create automated playbooks for triage, enrichment, containment, and case management * Integrate SOAR with SIEM, ticketing, collaboration, endpoint, identity, and cloud security tools * Develop Python scripts and integrations to automate tasks and normalize data * Apply AI/ML to improve analyst efficiency, alert triage, and workflow decisioning * Establish guardrails and validation for AI-enabled workflows * Collaborate with SOC, SIEM, threat detection, and incident response teams on automation opportunities * Monitor, tune, and optimize automation platforms for reliability and performance * Build dashboards and metrics to track automation adoption and incident response improvements * Contribute to automation/AI roadmap and client onboarding activities Tasks * Strong experience with SOAR platforms (preferably Swimlane and Palo Alto XSOAR) * Security automation, orchestration, and systems integration experience * Proficiency in Python or other scripting languages for automation * Experience with APIs, webhooks, JSON, authentication, and event-driven integrations * Familiarity with SIEM platforms and security operations workflows * Knowledge of AI-assisted operations and practical uses of AI in security * Excellent verbal and written communication skills * Incident handling and response experience * Ability to work independently and collaboratively in a high-sensitivity environment * 2-4 years in Information Security, Incident Response, SOAR engineering, or related fields * Hands-on experience with IDS, Firewall, SIEM, SOAR, EDR, IAM, email security, and cloud security tools * Understanding of security threats, attack vectors, vulnerabilities, and exploits * Knowledge of regular expressions and data transformation concepts * Customer service oriented with professionalism and strong judgment Key requirements * Medical, Dental, and Vision Insurance * 401(k) * Paid holidays * Paid time off * Paid parental and caregiver leave * Plus more benefits


## Related Videos

- [The New AI Security Stack: Observe, Detect, Protect](https://www.wearedevelopers.com/videos/100302-the-new-ai-security-stack-observe-detect-protect)
- [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json)
- [Beyond Webhooks: The Future of Scalable API Event Delivery](https://www.wearedevelopers.com/videos/100312-beyond-webhooks-the-future-of-scalable-api-event-delivery)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Get security done: streamlining application security with Aikido](https://www.wearedevelopers.com/videos/1638-get-security-done-streamlining-application-security-with-aikido)
- [Introducing JSON Structure](https://www.wearedevelopers.com/videos/100219-introducing-json-structure)

## Related Articles

- [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)