SIEM Automation Consultant

Job Summary

To support enterprise customers in optimizing security orchestration and automation solutions, the remote SIEM Automation Consultant will design, develop, and implement automation playbooks, lead integrations with various security platforms, and serve as a trusted advisor throughout the security transformation journey.

Key responsibilities

• Design, develop, and optimize SIAM/SOAR automation playbooks and workflows to enhance incident response and security operations
• Lead the implementation of security automation solutions, integrating with SIEM, EDR, and third-party platforms using Python, REST APIs, and JSON
• Analyze customer security operations processes and provide guidance on automation best practices and operational improvements

Required qualifications

• 3+ years of experience in cybersecurity consulting
• Hands-on experience building automation playbooks and integrations within SOAR and/or SIAM
• Strong Python development skills with experience in RESTful APIs and JSON for security automation
• Experience in Security Operations (SOC) environments with a solid understanding of incident response processes
• Knowledge of enterprise security technologies, including SIEM, EDR, and endpoint security solutions