{"id":1682163,"url":"https://alion.io/job/opentext-lead-security-analyst-soar","title":"Lead Security Analyst - SOAR","company":{"id":13922,"name":"OpenText","domain":"opentext.com","url":"https://alion.io/company/opentext","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":{"grade":"A","score":99,"open_postings":4,"ghost_share":0,"stale_share":0.25,"repost_share":0,"time_to_fill_p50_days":13,"computed_at":"2026-10-09T06:01:00Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Waterloo, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":110960,"max":160960,"currency":"CAD","period":"year","gross":null,"usd_annual":112873},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"DNS","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false}],"status":"live","first_seen_at":"2026-09-23T15:04:29Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-09T21:53:30Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"OPENTEXT - THE INFORMATION COMPANY\nOpenText is a global leader in information management, where innovation, creativity, and collaboration are the key components of our corporate culture. As a member of our team, you will have the opportunity to partner with the most highly regarded companies in the world, tackle complex issues, and contribute to projects that shape the future of digital transformation.\nAI-First. Future-Driven. Human-Centered.\nAt OpenText, AI is at the heart of everything we do-powering innovation, transforming work, and empowering digital knowledge workers. We are hiring talent AI can't replace to help us shape the future of information management. Join us.\n**Must be eligible to obtain and maintain a Government of Canada Secret security clearance. Eligibility requirements for the clearance are established by the Government of Canada and may include Canadian citizenship.\nGlobal Information Security (GIS) leverages our people, processes and technology to develop new digitalization efforts that ensure our enterprise systems’ reliability, minimize staff interaction, and most importantly, protect our customers’ data. Companies are recognizing the need to digitize information and manage alternative work scenarios in today’s changing reality. With this in mind, we work tirelessly to drive improvements across our security services and accelerate our customers’ digital journey in a safe and trusted environment.\nSecurity Operations is the team that handles day to day protection of our environment and the tools that support them. This team takes care of identifying security weaknesses and facilitates remediation efforts. Additionally, this team monitors networks to assesses abnormal behaviors and manages security incidents to allow for execution of response processes.\nYour Impact:\nThe Lead Security Analyst - SOAR is a senior technical lead responsible for designing, building, and supporting security orchestration, automated response, and AI-enabled security workflows. This role develops reliable automation using Python, Jinja, REST APIs, and security orchestration platforms to reduce manual incident response effort and improve security operations efficiency.\nThe role works closely with security analysts, incident responders, detection engineers, and security tool owners to identify automation opportunities, guide playbook design, support responsible AI-enabled automation, and ensure workflows are reliable, maintainable, and ready for production use.\nWhat the role offers:\nAs a Lead Security Analyst, you will:\nDesign, develop, and maintain automated security playbooks for alert triage, enrichment, investigation, response, notification, and ticketing.\nBuild custom integrations, parsers, and data transformation routines using Python and Jinja to enable scalable security automation.\nIntegrate SIEM, EDR, threat intelligence, firewall, case management, and ticketing platforms through REST APIs and supported connectors.\nMonitor, troubleshoot, test, and optimize security automation workflows to improve reliability, performance, and alert handling efficiency.\nCollaborate with security analysts and operational teams to identify, streamline, and automate manual security processes.\nDebug code, enhance workflow execution, and maintain automation logic aligned with operational and incident response requirements.\nSupport the responsible adoption of AI and agentic AI capabilities for triage, enrichment, recommendations, analyst productivity, and human-reviewed response actions\nDrive automation best practices through consistent playbook design, testing, documentation, runbooks, change management, and support for SOC, incident response, threat intelligence, detection engineering, and vulnerability management workflows.\nWhat you need to Succeed:\nStrong hands-on experience developing security automation using Python, Jinja, REST APIs, and structured data formats.\nExperience integrating security orchestration, monitoring, endpoint security, network security, threat intelligence, ticketing, and case management platforms.\nSolid understanding of TCP/IP, DNS, HTTPS, and common network protocols used in security investigations and automation workflows.\nProven ability to troubleshoot complex automation issues, debug code, optimize workflows, and improve operational efficiency.\nExperience documenting workflows, maintaining version-controlled logic, testing playbooks, and supporting reliable production operations.\nStrong collaboration and communication skills, with the ability to translate operational requirements into practical automation solutions.\nProactive mindset focused on continuous improvement, reducing manual response efforts, and enhancing incident response consistency.\nBachelor's degree or equivalent experience with 5+ years in cybersecurity, security engineering, automation engineering, or security operations; preferred certifications include Security+, CISSP, GCIH, GCIA, and related cloud security, automation, SOAR, or AI/ML credentials.\nOne last thing:\nOpenText is more than just a corporation, it's a global community where trust is foundational, the bar is raised, and outcomes are owned.\nJoin us on our mission to drive positive change through privacy, technology, and collaboration. At OpenText, we don't just have a culture; we have character. Choose us because you want to be part of a company that embraces innovation and empowers its employees to make a difference.\nOpenText's commitment to diversity and inclusion surpasses legal requirements, evident in our Equal Employment Opportunity Statement of Policy which promotes a respectful and empowering environment for employees of all backgrounds, culture, national origin, race, color, gender, gender identification, sexual orientation, family status, age, veteran status, disability, religion, or other basis protected by applicable laws.\nIf you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please submit a ticket at Ask HR. Our proactive approach fosters collaboration, innovation, and personal growth, enriching OpenText's vibrant workplace.\nCompensation: At OpenText, we offer a thoughtfully designed benefits package that supports your physical, emotional, and financial wellbeing. As you move through the hiring process, we’re happy to provide more details about our compensation programs, including variable and commission compensation opportunities for eligible roles, vacation entitlement, and paid time off.\nSalary Range: $110,960.00 - $160,960.00; Depending on the candidate’s education, experience, skills, geographical location, and alignment with internal equity and external market, actual salary may vary and be higher or lower than the range posted.\nAI Usage Disclosure: As part of our commitment to transparency, we use artificial intelligence (AI) tools to assist in various stages of our recruitment process, including resume screening, candidate matching, interview scheduling, and communications. These tools are designed to improve efficiency, reduce bias, and enhance candidate experience. All decisions regarding hiring are made by qualified human professionals, and we continuously monitor our AI systems to ensure fairness and compliance with applicable regulations.","description_format":"text","description_chars":7307,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","Document Management","CMS & Digital Experience Platforms","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-02T09:46:49Z"},{"event":"close","at":"2026-10-03T22:58:01Z"},{"event":"reopen","at":"2026-10-04T03:40:33Z"},{"event":"close","at":"2026-10-04T05:55:39Z"},{"event":"reopen","at":"2026-10-04T15:35:40Z"},{"event":"close","at":"2026-10-04T21:25:10Z"},{"event":"reopen","at":"2026-10-05T00:02:25Z"},{"event":"close","at":"2026-10-05T12:50:38Z"},{"event":"reopen","at":"2026-10-05T15:21:22Z"},{"event":"close","at":"2026-10-05T18:11:17Z"},{"event":"reopen","at":"2026-10-05T21:08:56Z"}],"visa":[],"liveness":{"score":37,"band":"fade","label":"Fading","p_open":1,"p_active":0.668,"p_room":0.55,"age_days":15,"expected_fill_days":13,"reasons":["conf:0","velocity","win:tail","comp:brand"],"computed_at":"2026-10-09T06:01:00Z"},"pay":{"stated_usd_annual":112873,"is_top_pay":false},"html_url":"https://alion.io/job/opentext-lead-security-analyst-soar","json_url":"https://alion.io/job/opentext-lead-security-analyst-soar.json","meta":{"generated_at":"2026-10-10T00:56:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":1496,"day_limit":5000,"remaining_today":3504,"minute_limit":60,"resets_at":"2026-10-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13922},"rest":"https://alion.io/mcp/rest/get_company?id=13922"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fopentext-lead-security-analyst-soar"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fopentext-lead-security-analyst-soar"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fopentext-lead-security-analyst-soar"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/opentext-lead-security-analyst-soar\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fopentext-lead-security-analyst-soar"}]}