Information Security Engineer – Security Automation and Response

BinaryBees Business Solutions LLC is seeking an Information Security Engineer specializing in Security Automation and Response. This fully remote position focuses on advancing Security Operations capabilities through SOAR playbook development, automation, and AI-driven workflows to enhance incident response and SOC operational efficiency.

Responsibilities:

• Develop, implement, and maintain SOAR playbooks to automate repetitive security tasks, including alert triage, threat investigation, and incident response, using tools like SOAR, Python, and API integrations
• Advance Security Operations capabilities through AI-driven initiatives, in collaboration with the Information Security Operations Manager
• Investigate malware, intrusions, unauthorized access, and data infiltration/exfiltration events
• Analyze logs, memory, disk images, and network captures to determine attack scope and impact
• Stay current on cyber threats and industry best practices to continuously enhance SOC capabilities
• Work with SIEM platforms and associated query languages (Yara-L, CQL, SPL, etc.)
• Participate in Purple Team activities
• Participate in on-call rotation and respond to critical security events

Requirements:

• SOAR playbook development — hands-on experience automating repetitive security tasks using SOAR tools, Python, and API integration
• Threat detection development and SOAR automation knowledge, with IR experience
• Strong SIEM knowledge, including query languages: Yara-L, CQL, SPL, etc
• Experience supporting AI-driven security operations initiative
• Prior experience developing SOAR playbooks (not just using pre-built ones)
• Has created processes using SOAR automation
• Helped a SOC gain more visibility with logs
• Has developed detections
• Experience with the specific query languages above is a strong signal
• BS or BA in Computer Science, Engineering, or equivalent education, training, or work experience
• 5+ years of security experience, or equivalent training and education
• Solid knowledge of computing systems, data network communications, and network architecture
• Hands-on experience with SOAR playbook development
• Required scripting or programming skills (Python, PowerShell, Go, etc.)
• Experience in incident response and threat investigation
• Experience in threat detection and understanding of logging systems
• Effective written and verbal communication skills
• Security certifications (GIAC, CISSP)