Plain Concepts logo
Plain Concepts

Rediscover the meaning of technology | Spain, USA, UK, Germany, Netherlands, Australia and Romania.

Security Automation Architect – SIEM/SOAR, AI

SDETSDETFull TimeRemoteSeniorTeam 201-500Since 2006H1B No SponsorCompany SiteLinkedIn

Location

Spain

Posted

3 days ago

Salary

0

Seniority

Senior

Bachelor Degree6 yrs expEnglishAzureCloudCyber Security

Job Description

Security Automation Architect – SIEM/SOAR, AI

Plain Concepts

• AI-native SOC transformation • Analyze current SOC operating models, L1/L2 activities, escalation flows and response procedures. • Identify opportunities to automate, augment or redesign detection and response processes using AI automation and agentic workflows. • Translate analyst knowledge into structured, reusable and automatable workflows. • Define how AI agents can support alert triage, enrichment, investigation, prioritization and response. • Establish clear boundaries between autonomous actions, AI-assisted recommendations and human decision points. • Help organizations evolve from traditional SOC processes to AI-enabled security operations. • Detection & Response automation architecture • Define automation blueprints for common detection and response use cases. • Convert incident response playbooks into structured workflows. • Define decision trees, enrichment steps, evidence requirements and output formats. • Support the design of automated triage, false positive reduction and incident prioritization. • Create reusable patterns for investigation, containment, escalation and reporting. • Ensure automation is reliable, explainable and operationally useful for SOC teams. • Agentic security operations design • Define agent roles, responsibilities, permissions and execution boundaries. • Design human-in-the-loop models for sensitive or high-impact actions. • Define approval workflows, escalation paths and confidence thresholds. • Ensure agent recommendations are explainable, traceable and auditable. • Define logging and evidence requirements for AI-assisted decisions. • Identify and mitigate risks such as unsafe automation, hallucination, excessive permissions, prompt injection, data leakage or incorrect response actions. • Work with AI engineering teams to ensure agentic workflows are secure, controlled and aligned with security operations needs. • SIEM, SOAR and security tooling integration • Human-in-the-loop operating model • Continuous improvement and operational impactRelevant technology exposure

Job Requirements

  • 6+ years of experience in cybersecurity, with strong background in Detection & Response, SOC operations, security automation, SIEM engineering or security architecture.
  • Proven experience designing or implementing AI automation, AI-assisted workflows, agentic automation or AI-enabled operational processes.
  • Strong understanding of how modern SOCs operate across L1, L2 and L3 functions.
  • Experience designing or improving detection use cases, triage processes, incident response procedures and SOC playbooks.
  • Hands-on experience with SIEM and/or SOAR platforms.
  • Ability to translate analyst procedures into structured workflows, decision trees and automation requirements.
  • Good understanding of alert enrichment, case management, incident lifecycle management and escalation models.
  • Practical understanding of identity, permissions, API integrations and secure automation design.
  • Ability to work with SOC analysts, security architects, engineering teams and senior client stakeholders.
  • Strong documentation skills, especially for operational procedures, use case specifications and technical architecture.
  • Ability to design automation that works in real SOC environments, not just theoretical diagrams.
  • Desirable experience with:**
  • Microsoft Sentinel, Defender XDR or Microsoft Security Copilot.
  • Microsoft Foundry or Azure AI-based automation.
  • Agentic AI workflows in cybersecurity or IT operations.
  • Loop generation and maintenance
  • SOC automation / SOAR implementation.
  • Logic Apps, Azure Functions or automation runbooks.
  • KQL, SPL or equivalent SIEM query languages.
  • Detection engineering and MITRE ATT&CK mapping.
  • Threat intelligence enrichment.
  • Incident response automation.
  • XDR / EDR platforms and cloud security operations.
  • Case management integration.
  • Enterprise SOC transformation programs.
  • MDR/MSSP operating models.
  • Purple teaming or detection validation.
  • DevSecOps or infrastructure automation.
  • GRC/control evidence automation for security operations.

Benefits

  • Salary determined by the market and your experience 🤑
  • Flexible schedule 35 Hours / Week 😎
  • Fully remote work (optional) 🌍
  • Flexible compensation (restaurant, transport, and childcare) ✌
  • Fully free health insurance, with a co-payment for dental services 🚑
  • Individual budget for training or equipment and free Microsoft certifications 📚
  • English lessons 🗽
  • Birthday day off 🌴🥳
  • Monthly bonus for electricity and Internet expenses at home 💻
  • Discount on gym plan and sports activities 🔝
  • Plain Camp (annual team-building event) 🎪
  • Extra perks: events attendance and speakers, welcome pack, baby basket, Christmas basket, discount portal for employees ➕ The pleasure of always working with the latest technological tools!

Related Categories

Related Job Pages

More SDET Jobs

Full TimeRemoteTeam 5,001-10,000Since 2011H1B No Sponsor

Snap Inc is a technology company. We believe the camera presents the greatest opportunity to improve the way people live and communicate. Snap contributes to human progress by empowering people to express themselves, live in the moment, learn about the world, and have fun together. The Company operates Snapchat, a visual messaging app that enhances your relationships with friends, family, and the world, and Specs Inc., a wholly-owned subsidiary dedicated to making computing more human, in addition to Bitmoji, Saturn, and other digital services. Specs Inc. is a wholly-owned subsidiary of Snap Inc. dedicated to making computing more human. The company develops Specs, advanced eyewear that seamlessly integrates digital experiences into the physical world. Specs feature see-through lenses that place digital objects directly into three-dimensional space, powered by Snap OS, a proprietary, context-aware operating system designed for natural interaction with your hands and voice. Specs Inc. also provides Lens Studio, a full suite of advanced developer tools that powers immersive augmented reality experiences across Specs, Snapchat, and other services. We’re looking for a Embedded Software/Firmware Test Engineer to join the Specs team! What you’ll do: - Own QA for current and new Micro Display Software, Firmware, and Tools - Develop test plans, implement test code before releasing code and tools to the productions and the other teams - Work closely with code developers to understand code and how it works in the systems level - Work closely with EE team to understand all boards to set up test environments - Generate Jira tickets to describe bugs related to SW, FW, tools, and HW - Document the user interface for the tools with boards - Contribute to code review for Software, Firmware, and tools Knowledge, Skills & Abilities: - Strong knowledge of Python, C/C++ and C# code - System level understanding of boards, chips, interfaces, software/firmware flows - Collaborate closely with teammates, EE, and production teams - Experience using AI tools as like Cursor, Copilot - Experience working with various communication interfaces such as USB, I2C/I3C, SPI, UART, MIPI, SWD and PCIE - Great interpersonal skills; ability to collaborate across groups through written, verbal and visual formats Minimum Qualifications: - BS/BA degree in Computer Science or EE - 5+ years of experience in Software or Firmware development experiences Preferred Qualifications: - Experience with coding Python and C# coding for QA or tools for consumer-electronics systems - Experience using small micro controllers like ARM or Risc V - Experience of firmware coding in C/C++ based on RTOS/non-RTOS system - Experience identifying issues related to HW and Software/Firmware in consumer-electronics mass-produced systems - Knowledge of micro-display systems, video standards and related protocols such as MIPI, HDMI, DisplayPort - Experience using lab equipment such as oscilloscopes, logic analyzers - Ideal candidate is a self-starter, can organize complex issues and drive them to closure If you have a disability or special need that requires accommodation, please don’t be shy and provide us some information. "Default Together" Policy at Snap: At Snap Inc. we believe that being together in person helps us build our culture faster, reinforce our values, and serve our community, customers and partners better through dynamic collaboration. To reflect this, we practice a “default together” approach and expect our team members to work in an office 4+ days per week. At Snap, we believe that having a team of diverse backgrounds and voices working together will enable us to create innovative products that improve the way people live and communicate. Snap is proud to be an equal opportunity employer, and committed to providing employment opportunities regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, pregnancy, childbirth and breastfeeding, age, sexual orientation, military or veteran status, or any other protected classification, in accordance with applicable federal, state, and local laws. EOE, including disability/vets. We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, where applicable). Our Benefits: Snap Inc. is its own community, so we’ve got your back! We do our best to make sure you and your loved ones have everything you need to be happy and healthy, on your own terms. Our benefits are built around your needs and include paid parental leave, comprehensive medical coverage, emotional and mental health support programs, and compensation packages that let you share in Snap’s long-term success! Compensation In the United States, work locations are assigned a pay zone which determines the salary range for the position. The successful candidate’s starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. The starting pay may be negotiable within the salary range for the position. These pay zones may be modified in the future. Zone A (CA, WA, NYC): The base salary range for this position is $157,000-$235,000 annually. Zone B: The base salary range for this position is $149,000-$223,000 annually. Zone C: The base salary range for this position is $133,000-$200,000 annually. This position is eligible for equity in the form of RSUs.

District Of Columbia
$133K - $235K / year
Job Closed
Full TimeRemoteTeam 5,001-10,000H1B Sponsor

Role Description Would you enjoy working with large distributed systems? Are you excited about working with cutting-edge security systems? Join our cutting-edge Web Security Team. Our team designs and develops technology that helps customers improve security posture and overall threat-intelligence at Edge. Our global distributed network solves problems at a scale that few others can approach. By leveraging our deployment of servers around the world, we uniquely solve technology problems with innovative solutions. As a Software Development Engineer in Test II, you will develop software that runs one of the largest distributed systems in the world. You will play a key role in our growth strategy. You'll be creating innovative solutions for network challenges increasing internet traffic, making it faster, reliable, and secure. As an SDET II, you will be responsible for: - Designing, maintaining, and executing comprehensive test strategies and automation frameworks for complex distributed systems. - Exploring and integrating modern AI-driven testing tools and LLM utilities to optimize test case generation, automate code reviews, and implement self-healing test scripts. - Collaborating with cross-functional team members within and across business units to leverage internal product knowledge and expertise. - Embracing a "Service Always Available" approach through robust test design, CI/CD pipeline integration, and proactive operational awareness. - Working with engineering teams to isolate, triage, and troubleshoot complex system problems, utilizing traditional logging as well as AI-powered observability and log analysis tools. - Demonstrating a strong balance between Time-to-Market, rigorous execution, and customer success. Qualifications - 3+ years of relevant software testing and automation experience with a Bachelor's or Master’s degree in Computer Science, or an equivalent technical field. - Strong automation experience in Java or another Object-Oriented Programming (OOP) language, with a solid understanding of data structures and algorithms. - Experience with—or a strong conceptual understanding of—AI-assisted QA tools (e.g., GitHub Copilot for test writing, Claude code, or utilizing OpenAI APIs for generating synthetic test data). - Keen interest in learning new technologies, frameworks, and shifting industry trends (such as AI-augmented engineering). Benefits Our ability to shape digital life today relies on developing exceptional people like you. The kind that can turn impossible into possible. We’re doing everything we can to make Akamai a great place to work. A place where you can learn, grow and have a meaningful impact. With our company moving so fast, it’s important that you’re able to build new skills, explore new roles, and try out different opportunities. There are so many different ways to build your career at Akamai, and we want to support you as much as possible. - Development opportunities available from programs such as GROW and Mentoring. - Internal events like the APEX Expo. - Tools such as Linkedin Learning to help you expand your knowledge and experience.

India
Full TimeRemoteTeam 10,001+H1B Sponsor

• Design, build, and maintain automated test frameworks for cloud native services, APIs, and event driven workflows running in AWS • Develop integration, contract, and end to end tests validating interactions across customer data platforms, personalization engines, campaign orchestration, and downstream channels • Embed automated testing and quality gates into CI/CD pipelines to support fast, reliable releases • Validate personalization, segmentation, and eligibility logic across channels, regions, brands, and guest journeys • Create reusable libraries and tooling that enable engineering teams to self service testing at scale • Build automated tests for AI and ML driven systems, including recommendation outputs, decision logic, and optimization flows • Ensure correctness and stability of guest data pipelines, identity resolution, and activation outputs • Implement automated checks for schema changes, data anomalies, latency, and failure scenarios • Partner with engineering teams to improve testability, observability, and resilience of services • Leverage AWS native tooling and logs to support test diagnostics, debugging, and root cause analysis • Participate in incident reviews and contribute to prevention through automated quality controls and tooling • Promote a culture of quality engineering, automation, and shared ownership across the MarTech organization • Coordinate larger testing efforts and sharing of best practices across teams and organizations

Illinois
$120K / year

Role Description We’re looking for a SDET who’s passionate about quality; not just as a phase, but as a core part of how great software gets built. In this role, you’ll help shape what “great” looks like for our engineering teams, including setting test standards, supporting engineers and making sure quality is everyone’s responsibility. This role requires strong software development skills, deep understanding of distributed systems, and the ability to influence quality across the entire software development lifecycle (SDLC). You’ll be embedded in a collaborative environment where software is shipped fast, iteratively, and often. Your work will focus on making sure things don’t just work but work well together. You’ll bring clarity, structure and confidence to the way we test by balancing automation with human insight and keeping the end-user in mind. You would drive the automated testing efforts covering: - Contract testing - Smoke testing - Regression testing - End-to-end testing Ensuring that we deliver fast with full confidence. You’ll bring your considerable knowledge of test automation to help us build new products that are reliable, secure, performant, and resilient. If you’re curious, love asking the awkward questions, and want to support software engineers build and iterate quickly, you’ll thrive here. Qualifications - Computer Science or Information Technology degree, Diploma or similar - CSTAE or ASTQB ISTQB Advanced Certification - Certified Automation Tester (i.e. Cypress, Playwright) - Familiarity with pipeline and event-driven systems (Kafka, AWS EventBridge, AWS Step Functions, queues, streams, Snaplogic) Requirements - 4+ years experience in Test Automation - Strong hands-on experience in building and maintaining test automation frameworks and API testing tools, not just executing them - Confident writing automated tests in Typescript - Expertise in Designing and Executing End-to-End Test Strategies that aligns with Agile delivery - Solid experience embedding quality early in the SDLC by working closely with Product Managers, Engineers, Principal Engineers and Delivery Managers - Experience working in agile continuous delivery teams, including daily coordination with cross-functional stakeholders to evaluate, prioritize, and drive resolution of defects based on reproducibility, business impact, and release scope Benefits - Medical & Dental Care - Priority Pass Membership - Childcare allowance (for children up to 6 years old) - Birthday day off - Work From Anywhere 8 weeks per year

Worldwide