Detection Engineer II
OR · Remote
We care deeply about reducing noise, improving analyst efficiency through automation and SOAR, and ... Knowledge of machine learning for threat detection #LI-remote
New
OR · Remote
We care deeply about reducing noise, improving analyst efficiency through automation and SOAR, and ... Knowledge of machine learning for threat detection #LI-remote
New
OR · Remote
We care deeply about reducing noise, improving analyst efficiency through automation and SOAR, and ... Knowledge of machine learning for threat detection #LI-remote
New
Wilmington, DE · On-site +1
$111K - $152K/yr
Senior Cyber Security Engineer Wilmington, DE Monday - Friday 8:00 - 5:00 ET Hybrid/Remote We are ... Minimum 5+ years of experience in Security Operations, Detection Engineering, or SIEM/SOAR ...
Wilmington, DE · On-site +1
$111K - $152K/yr
Senior Cyber Security Engineer Wilmington, DE Monday - Friday 8:00 - 5:00 ET Hybrid/Remote We are ... Minimum 5+ years of experience in Security Operations, Detection Engineering, or SIEM/SOAR ...
MD · Remote
$65K - $136K/yr
We are currently seeking a DevSecOps Engineer - REMOTE to join our team in Bethesda (REMOTE ... Hub, SOAR platforms) * Experience with secure SDLC, vulnerability management, and continuous ...
MD · Remote
$65K - $136K/yr
We are currently seeking a DevSecOps Engineer - REMOTE to join our team in Bethesda (REMOTE ... Hub, SOAR platforms) * Experience with secure SDLC, vulnerability management, and continuous ...
Bethesda, MD · Remote
$65K - $136K/yr
We are currently seeking a DevSecOps Engineer - REMOTE to join our team in Bethesda (REMOTE ... Hub, SOAR platforms) * Experience with secure SDLC, vulnerability management, and continuous ...
Bethesda, MD · Remote
$65K - $136K/yr
We are currently seeking a DevSecOps Engineer - REMOTE to join our team in Bethesda (REMOTE ... Hub, SOAR platforms) * Experience with secure SDLC, vulnerability management, and continuous ...
Remote Interview Process: 1 round, Virtual/Online - potential for a 2nd round onsite as needed ... Support SOAR integrations and automation initiatives. • Coordinate with security engineering ...
Remote Interview Process: 1 round, Virtual/Online - potential for a 2nd round onsite as needed ... Support SOAR integrations and automation initiatives. • Coordinate with security engineering ...
Minneapolis, MN · Remote
$45 - $50/hr
Cincinnati, OH (Open to Remote) Duration: 12+ Months Key Responsibilities * Work closely on the ... Minimum 2 years of experience customizing any SOAR (Security Orchestration, Automation and Response ...
Quick apply
Minneapolis, MN · Remote
$45 - $50/hr
Cincinnati, OH (Open to Remote) Duration: 12+ Months Key Responsibilities * Work closely on the ... Minimum 2 years of experience customizing any SOAR (Security Orchestration, Automation and Response ...
Greensboro, NC · Remote
$110K - $152K/yr
This is a remote role that can sit anywhere in US (near Arch office preferred). Key ... Experience with SIEM, EDR/XDR, SOAR, or identity security platforms * Advanced certifications (e.g ...
Greensboro, NC · Remote
$110K - $152K/yr
This is a remote role that can sit anywhere in US (near Arch office preferred). Key ... Experience with SIEM, EDR/XDR, SOAR, or identity security platforms * Advanced certifications (e.g ...
Eau Claire, WI · On-site +1
This role manages tools including SIEM platforms, SOAR solutions, cloud security posture management ... as remote in Minneapolis, MN and Eau Claire, WI metro areas. You may be required to work ...
Eau Claire, WI · On-site +1
This role manages tools including SIEM platforms, SOAR solutions, cloud security posture management ... as remote in Minneapolis, MN and Eau Claire, WI metro areas. You may be required to work ...
Home, PA · Remote
$102K - $140K/yr
This is a remote role that can sit anywhere in US (near Arch office preferred). Key ... Experience with SIEM, EDR/XDR, SOAR, or identity security platforms * Advanced certifications (e.g ...
Home, PA · Remote
$102K - $140K/yr
This is a remote role that can sit anywhere in US (near Arch office preferred). Key ... Experience with SIEM, EDR/XDR, SOAR, or identity security platforms * Advanced certifications (e.g ...
Home, WA · Remote
$127K - $174K/yr
This is a remote role that can sit anywhere in US (near Arch office preferred). Key ... Experience with SIEM, EDR/XDR, SOAR, or identity security platforms * Advanced certifications (e.g ...
Home, WA · Remote
$127K - $174K/yr
This is a remote role that can sit anywhere in US (near Arch office preferred). Key ... Experience with SIEM, EDR/XDR, SOAR, or identity security platforms * Advanced certifications (e.g ...
Home, PA · Remote
$102K - $140K/yr
This is a remote role that can sit anywhere in US (near Arch office preferred). Key ... Experience with SIEM, EDR/XDR, SOAR, or identity security platforms * Advanced certifications (e.g ...
Home, PA · Remote
$102K - $140K/yr
This is a remote role that can sit anywhere in US (near Arch office preferred). Key ... Experience with SIEM, EDR/XDR, SOAR, or identity security platforms * Advanced certifications (e.g ...
Greensboro, NC · Remote
$110K - $152K/yr
This is a remote role that can sit anywhere in US (near Arch office preferred). Key ... Experience with SIEM, EDR/XDR, SOAR, or identity security platforms * Advanced certifications (e.g ...
Greensboro, NC · Remote
$110K - $152K/yr
This is a remote role that can sit anywhere in US (near Arch office preferred). Key ... Experience with SIEM, EDR/XDR, SOAR, or identity security platforms * Advanced certifications (e.g ...
Greensboro, NC · Remote
$110K - $152K/yr
This is a remote role that can sit anywhere in US (near Arch office preferred). Key ... Experience with SIEM, EDR/XDR, SOAR, or identity security platforms * Advanced certifications (e.g ...
Greensboro, NC · Remote
$110K - $152K/yr
This is a remote role that can sit anywhere in US (near Arch office preferred). Key ... Experience with SIEM, EDR/XDR, SOAR, or identity security platforms * Advanced certifications (e.g ...
Home, WA · Remote
$127K - $174K/yr
This is a remote role that can sit anywhere in US (near Arch office preferred). Key ... Experience with SIEM, EDR/XDR, SOAR, or identity security platforms * Advanced certifications (e.g ...
Home, WA · Remote
$127K - $174K/yr
This is a remote role that can sit anywhere in US (near Arch office preferred). Key ... Experience with SIEM, EDR/XDR, SOAR, or identity security platforms * Advanced certifications (e.g ...
Bethesda, MD · On-site +1
$65K - $136K/yr
... Hub, SOAR platforms) * Experience with secure SDLC, vulnerability management, and continuous ... Architect and Engineer (IASAE) Level I (position-based) per DoD 8570.1M3 NTT DATA provides a ...
Bethesda, MD · On-site +1
$65K - $136K/yr
... Hub, SOAR platforms) * Experience with secure SDLC, vulnerability management, and continuous ... Architect and Engineer (IASAE) Level I (position-based) per DoD 8570.1M3 NTT DATA provides a ...
Arlington, TX · On-site +1
Architect and lead complex REST API integration engagements across SIEMs, SOAR platforms, identity ... remote environment. Desired Experience * Working knowledge of the Forcepoint product portfolio.
Arlington, TX · On-site +1
Architect and lead complex REST API integration engagements across SIEMs, SOAR platforms, identity ... remote environment. Desired Experience * Working knowledge of the Forcepoint product portfolio.
Coral Gables, FL · On-site +1
$165/hr
... SOAR Certified Automation Developer preferred Location & Compensation * The hourly rate for this role is $165-175K depending on the individual's experience * Role can be 100% fully remote depending ...
Coral Gables, FL · On-site +1
$165/hr
... SOAR Certified Automation Developer preferred Location & Compensation * The hourly rate for this role is $165-175K depending on the individual's experience * Role can be 100% fully remote depending ...
Jersey City, NJ · On-site +1
Remote Duration: 6-12 months Security Operations Engineer to join our cybersecurity team and help ... Automate detection and response workflows using SOAR platforms or scripting languages (Python ...
Jersey City, NJ · On-site +1
Remote Duration: 6-12 months Security Operations Engineer to join our cybersecurity team and help ... Automate detection and response workflows using SOAR platforms or scripting languages (Python ...
$171K - $180K/yr
Design and build SOAR playbooks and automation workflows to streamline detection triage, enrichment ... This role is remote and the base pay range for a successful candidate is dependent on their ...
New
$171K - $180K/yr
Design and build SOAR playbooks and automation workflows to streamline detection triage, enrichment ... This role is remote and the base pay range for a successful candidate is dependent on their ...
New
... SIEM/SOAR/GRC tools, Tenable, Splunk, Sentinel, ServiceNow, Prisma Cloud, or similar tools ... Remote with occasional reporting to Arlington/Alexandria, VA. * Ability to pass a minimum ...
... SIEM/SOAR/GRC tools, Tenable, Splunk, Sentinel, ServiceNow, Prisma Cloud, or similar tools ... Remote with occasional reporting to Arlington/Alexandria, VA. * Ability to pass a minimum ...
$38K - $52K
5% of jobs
$52K - $65.9K
7% of jobs
$65.9K - $79.9K
9% of jobs
$82.8K is the 25th percentile. Wages below this are outliers.
$79.9K - $93.8K
14% of jobs
The median wage is $106.4K / yr.
$93.8K - $107.8K
16% of jobs
$107.8K - $121.7K
13% of jobs
$121.7K - $135.7K
6% of jobs
$143.1K is the 75th percentile. Wages above this are outliers.
$135.7K - $149.6K
8% of jobs
$149.6K - $163.6K
8% of jobs
$163.6K - $177.5K
7% of jobs
$177.5K - $191.5K
5% of jobs
$38K
$115.9K
$191.5K
A typical workday for a Remote SOAR Engineer involves designing, building, and maintaining automated security workflows, analyzing security alerts, and quickly responding to incidents using SOAR tools. You’ll work closely with Security Operations Center (SOC) analysts, incident responders, and IT teams, often coordinating via virtual meetings, chat platforms, and collaborative documentation tools. Tasks may also include troubleshooting automation scripts, updating playbooks based on emerging threats, and participating in team reviews to improve security processes. Despite being remote, effective communication and regular check-ins are key to ensuring alignment and smooth collaboration across global security teams.
To thrive as a Remote SOAR Engineer, you need expertise in cybersecurity operations, automation scripting (such as Python), and familiarity with Security Orchestration, Automation, and Response (SOAR) platforms, often supported by a degree in computer science or a related field. Proficiency with tools like Splunk, Palo Alto Cortex XSOAR, and relevant certifications (e.g., CISSP, GIAC) are highly valued. Strong problem-solving skills, effective communication, and the ability to work independently in a distributed environment are key soft skills. These qualifications ensure effective incident response automation and seamless integration with security operations while collaborating remotely with global teams.
A Remote SOAR (Security Orchestration, Automation, and Response) Engineer is responsible for designing, implementing, and maintaining SOAR solutions to enhance an organization's cybersecurity operations. They work remotely to automate security workflows, integrate various security tools, and improve incident response efficiency. This role requires expertise in scripting, API integrations, and security operations to optimize threat detection and response.

7.1
Based on 31 frontline employees who took The Breakroom Quiz
29th of 64 rated delivery companies
Overview
Instacart's Detection Engineering team sits at the core of our Security organization, building and operating the systems that identify, surface, and respond to threats across one of North America's largest grocery technology platforms. We own the full detection lifecycle, from telemetry collection and signal design to automated response, across a complex, cloud-native environment spanning endpoint, cloud, container, and SaaS.
As a Detection Engineer, you'll be a technical anchor on the team: developing high-fidelity detection logic, hunting for novel attacker techniques, and raising the bar for how we think about coverage, quality, and scale. You'll work closely with Engineering, Red Team, Incident Response, Fraud, and Trust & Safety to ensure our detections reflect real-world adversary behavior (and not just signatures).
We operate with a detection-as-code mindset: everything we build is versioned, tested, and deployed through repeatable pipelines. We care deeply about reducing noise, improving analyst efficiency through automation and SOAR, and continuously evolving our coverage as the threat landscape shifts.
If you're energized by hard forensic problems, enjoy translating attacker TTPs into durable detection logic, and want to help shape the future of a growing security function, this role is for you.
About the Job
About You
Minimum Qualifications
Preferred Qualifications
#LI-remote
Get the full story on Breakroom
Sourced by ZipRecruiter
Instacart, based in San Francisco, CA, US, operates within the retail industry, specifically grocery delivery and pick-up service. It is recognized as a pioneer in this field, delivering fresh groceries from local stores directly to customers' doors. The company, which launched its services in 2012, continues to pioneer change in the online grocery shopping sector through its commitment to cutting-edge technology, new business ideas, and dedicated service.
Technology, communication and media
10,000+ Employees
San Francisco, CA, US
2012