[Hiring] SOAR and AI Engineer - Managed Security @Ahead

Role Description

The Managed Security Team at AHEAD monitors client environments and performs incident detection, validation, response support, and reporting. The SOAR and AI Engineer will be responsible for the design, implementation, and continuous improvement of automation capabilities that increase the scale, speed, and consistency of our Managed Security operations. This role is heavily focused on security automation across SOAR, SIEM, case management, telemetry pipelines, and AI-assisted workflows that support the success of AHEAD’s Managed Security program.

This is a technical hands-on position that requires someone with a strong understanding of the needs of a 24/7 SOC (Security Operations Center). We are looking for a candidate with deep experience in security operations, SOAR engineering, scripting, systems integration, and applied AI who will work closely with the Managed Security staff and other highly technical members across multiple teams, both within AHEAD and in client environments, to continuously improve and enhance AHEAD’s automation-first Managed Security capabilities.

The SOAR and AI Engineer is responsible for the day-to-day management and evolution of the automation platforms used by the Managed Security Team to monitor client environments and support security investigations and response. This includes:

• Workflow design and development
• Tool integrations
• Case enrichment
• Automated triage
• Alert-to-case orchestration
• Playbook creation and tuning
• Chatbot or analyst-assist workflows
• Continuous optimization of automation performance and reliability

Qualifications

• Strong experience with SOAR platforms, preferably Swimlane and Palo Alto XSOAR
• Strong experience with security automation, orchestration, and systems integration
• Experience writing tools to automate tasks and integrate systems in Python or other languages
• Experience working with APIs, webhooks, JSON, authentication methods, and event-driven integrations
• Experience with SIEM platforms and common security operations workflows
• Familiarity with AI-assisted operations and practical uses of AI in security operations
• Excellent verbal and written communication skills
• Incident handling and response experience
• 2–4 years of experience in Information Security, Incident Response, SOAR engineering, security automation, detection engineering, or related disciplines
• Hands-on experience with common security technologies such as IDS, Firewall, SIEM, SOAR, EDR, IAM, email security, and cloud security tools

Requirements

• The ability to think creatively to find elegant solutions to complex problems
• A desire to work both independently and collaboratively with a larger team
• A willingness to be challenged along with a strong appetite for learning
• Knowledge of common security analysis tools and techniques
• Understanding of common security threats, attack vectors, vulnerabilities, and exploits
• Knowledge of regular expressions and data transformation concepts
• Customer service focused and portrays energy, professionalism, and welcoming characteristics
• Strong ability to work in a highly sensitive and confidential environment
• Ability to meet deadlines and handle sensitive and pressured situations
• Ability to identify issues and help develop strategy and tactical plans for various department initiatives
• Ability to use good judgment and decision-making skills

Preferred Qualifications

• Experience with Swimlane, Palo Alto XSOAR, Elastic, and related Managed Security tooling
• Experience building analyst-assist workflows, case summarization, or AI-powered enrichment pipelines
• Familiarity with cloud environments such as AWS, Azure, or GCP and their native security tooling
• Experience integrating ServiceNow, collaboration tooling, and case management systems into security operations workflows
• Understanding of governance and risk considerations for production AI usage in security operations

Education

• Bachelor’s Degree in Computer Science, Information Security, Engineering, or related/equivalent educational or work experience
• One or more of the following certifications preferred: CISSP, GCIH, GCIA, GMON, GPYC, relevant SOAR certifications, cloud security certifications, or security automation-related credentials

Benefits

• Medical, Dental, and Vision Insurance
• 401(k)
• Paid company holidays
• Paid time off
• Paid parental and caregiver leave
• Plus more! See benefits here for additional details.

Compensation

$120,000 - $160,000 a year. The compensation range indicated in this posting reflects the On-Target Earnings (“OTE”) for this role, which includes a base salary and any applicable target bonus amount. This OTE range may vary based on the candidate’s relevant experience, qualifications, and geographic location.