Security Engineer, SOAR and Automation

Who are we?

Checkmarx is the enterprise application security leader and the host of Checkmarx One, the industry-leading cloud-native AppSec platform that helps enterprises build #DevSecTrust. Powered by the intelligence from our industry-leading AppSec security research team, and our AI-driven technology and services, our platform is designed to enable CISOs, AppSec and development leaders to prioritize their teams' focus on what impacts their business. Our offerings secure every phase of development for every application, from the very first line of code through production, while simultaneously balancing the dynamic needs of security and development teams. We are honored to serve more than 1,800 customers, which includes 60 percent of all Fortune 100 organizations. We are committed to moving forward with the unwavering dedication to the safety and security of our customers, and the applications that power our day-to-day lives.

What Are We Looking For?

We are looking for a Security Engineer to join our Security Operations team and grow into our SOAR and automation specialist.

The team is responsible for monitoring our environments, identifying and responding to security alerts, and continuously improving how we detect and respond to threats. This role focuses on the automation side of the function: building the workflows that make the rest of the team faster, from automated alert triage to enrichment pipelines to response playbooks.

You will work closely with senior engineers on the team to build and maintain SOAR content, integrate our security tools, and support detection deployment efforts. This role offers a strong opportunity to grow professionally in the security field, with direct exposure to detection engineering, incident response, and a modern enterprise security stack.

How Will You Make an Impact?

• Own day-to-day operation of our SOAR platform.
• Build and maintain automation playbooks for alert triage, enrichment, ticketing, and notifications.
• Build and maintain integrations between SOAR and the broader security stack via APIs.
• Monitor integration health, API connections, and credential rotation across automated workflows.
• Measure and report on automation impact: alerts auto-resolved, analyst time saved, and MTTR reduction.
• Support detection engineering on testing, deployment, and rollout of new content.
• Write small scripts to support ad-hoc threat hunting and IR work.
• Create and maintain technical documentation for playbooks and integrations.
  
  

• 1–2 years of hands-on experience in IT, SOC, or Security Engineering. Internships, home labs, and personal projects count.
• Scripting skills in Python; familiarity with JavaScript or Bash is a plus.
• Comfortable working with REST APIs, JSON, and webhooks.
• Understanding of networking and protocol fundamentals: TCP/IP, DNS, HTTP, authentication flows.
• Familiarity with at least one SOAR platform is a strong plus.
• Exposure to SIEM, EDR, or cloud security tools is a plus.
• Attention to detail and structured thinking.
• Clear written communication.