{"id":2772189,"url":"https://alion.io/job/ust-soar-automation-engineer","title":"SOAR Automation Engineer","company":{"id":1774626,"name":"UST","domain":"ust.com","url":"https://alion.io/company/ust-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"RippleHire","truth_index":{"grade":"B","score":75,"open_postings":137,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":23,"computed_at":"2026-10-21T05:46:15Z"}},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kochi, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude","optional":false},{"name":"Claude Code","optional":false},{"name":"Copilot","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"Cursor","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"OpenAI Codex","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"ThreatConnect","optional":false},{"name":"Tines","optional":false},{"name":"GitLab CI","optional":true},{"name":"Jenkins","optional":true},{"name":"Model Context Protocol","optional":true},{"name":"OWASP","optional":true}],"status":"live","first_seen_at":"2026-09-24T00:00:00Z","employer_posted_date":"2026-10-17","last_verified_at":"2026-10-21T05:37:30Z","board_verified":true,"closed_at":null,"days_open":27,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":27},"description":"Information Security Engineer Role\nOverview\nWe are seeking a talented and experienced Security Engineer with a strong focus on Python and security automation to join our Information Security team. The ideal candidate will be adept at developing and implementing automated security solutions to protect our systems and data, as well as reviewing, validating, and hardening code and workflows produced by AI coding assistants (e.g., Claude, GitHub Copilot) and agentic systems. This role requires a proactive individual who can work independently and collaboratively to enhance our security posture in an environment where both humans and AI agents write and operate code. In addition, proficiency and experience using a SOAR for automation and security incident response is required.\nKey Responsibilities\nDevelop, implement, and maintain security automation scripts and tools using Python to a high standard of reliability and efficiency, including reviewing and hardening code generated by AI coding assistants.\nIntegrate security tools and solutions, including developing and managing APIs, to automate security processes and workflows.\nConduct security assessments and vulnerability analysis to identify and mitigate potential threats.\nMonitor security systems and respond to incidents with automated solutions, implementing and managing SOAR platforms (e.g., Palo Alto Cortex XSOAR, Tines, Splunk Phantom, IBM Resilient, Cyware, Microsoft Logic Apps, ThreatConnect) to streamline response activities.\nCollaborate with cross-functional teams to design and implement security controls, and write clear technical documentation (SOPs, write-ups, user guides) for tools and processes.\nGovern enterprise use of AI coding assistants and agentic tools (e.g., Claude Code, Codex, GitHub Copilot, Cursor), including tenant restrictions, access scoping, and compliance/audit logging.\nDesign and enforce security controls for agentic AI systems, including tool-permission boundaries, prompt injection defenses, and agent identity/access governance.\nUtilise Microsoft Defender for Endpoint (MDE) for threat detection and Kusto Query Language (KQL) to analyse security data.\nImplement CI/CD pipeline automation and Infrastructure as Code (IaC) tools (e.g., Terraform, Ansible) to ensure secure code deployment and infrastructure provisioning.\nSkills and Experience Required\nBachelor’s degree in computer science, Information Security, or a related field.\nProven experience as a Security Engineer or in a similar role, with a focus on Python and security automation.\nStrong programming skills in Python, with experience developing automation scripts and tools, as well as reviewing and validating code generated by AI coding assistants.\nExperience with security tools and technologies such as SIEM, IDS/IPS, firewalls, and vulnerability scanners.\nKnowledge of cloud security (AWS, Azure, GCP) and container security (Docker, Kubernetes).\nExperience with API development and integration, including RESTful APIs.\nProficiency in implementing and managing SOAR platforms (e.g., Palo Alto Cortex XSOAR, Splunk Phantom, IBM Resilient, Cyware, Microsoft Logic Apps, ThreatConnect).\nHands-on experience with Microsoft Defender for Endpoint (MDE) for endpoint security.\nExcellent problem-solving skills and attention to detail, with strong written and verbal communication, including writing technical documentation (SOPs, write-ups, user guides) for technical and non-technical stakeholders.\nExperience securing AI/LLM-based agentic systems, including prompt injection defense, tool-permission boundaries, and agent identity governance.\nExperience governing enterprise AI coding assistants (e.g., Claude Code, Codex, GitHub Copilot), including compliance/audit logging, tenant restrictions, and CI/CD supply-chain hardening against AI-related risks.\nDesirable\nProficiency in Kusto Query Language (KQL) for querying and analysing security data.\nRelevant certifications such as CISSP, CEH, OSCP, or GIAC.\nExperience with DevSecOps practices and CI/CD tools (e.g., Jenkins, GitLab CI/CD).\nUnderstanding of network protocols and security architecture.\nFamiliarity with the OWASP Agentic AI Top 10 (e.g., tool misuse, agentic supply-chain risk, unexpected code execution, human-agent trust exploitation).\nExperience with AI red-teaming and evaluation methodologies for agentic and LLM-based systems.\nUnderstanding of Model Context Protocol (MCP) security and other agent-tool integration risks.","description_format":"text","description_chars":4469,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams"],"lifecycle":[{"event":"open","at":"2026-10-17T06:42:33Z"}],"visa":[],"liveness":{"score":25,"band":"fade","label":"Fading","p_open":1,"p_active":0.458,"p_room":0.55,"age_days":27,"expected_fill_days":23,"reasons":["conf:0","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/ust-soar-automation-engineer","json_url":"https://alion.io/job/ust-soar-automation-engineer.json","meta":{"generated_at":"2026-10-21T08:46:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12355,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1774626},"rest":"https://alion.io/mcp/rest/get_company?id=1774626"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fust-soar-automation-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fust-soar-automation-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fust-soar-automation-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ust-soar-automation-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fust-soar-automation-engineer"}]}