Xsoar Engineer Jobs in Bothell, WA (NOW HIRING)

Detection & Automation Engineering operates Adobe's detection and response backbone, closing the gap between detection and containment.

As a Senior Security Automation Engineer, you'll design and build production-grade automation, orchestration, and agentic AI systems that reduce mean-time-to-respond and scale Adobe's security operations beyond human-speed triage. You'll partner with Detection Engineering to turn new detection rules into working response, engineer enterprise-scale APIs and orchestration services across the security stack, and deliver containment automation and identity/access response actions used in live incidents. This is a build role for someone who wants to reshape how Adobe automates security response, not simply administer a SOAR platform.

WHAT YOU'LL DO

• Design, develop, and maintain automation and orchestration systems spanning SOAR playbooks, custom services, and agentic AI workflows that automate enrichment, correlation, and containment across the security stack.
• Partner directly with Detection Engineering on every new detection rule that needs a response action. They define the logic, you engineer and verify the automation, including autonomous/agentic response paths where appropriate.
• Architect and build enterprise-grade APIs, connectors, and orchestration services that give security operations teams machine-speed enrichment and correlation, reducing analyst triage time and improving signal quality at scale.
• Own containment and remediation automation for Incident Response, including identity-and access-related response actions used during live incidents.
• Create and maintain policy-enforcement automation, ensuring upstream access and control decisions execute reliably, without gaps.
• Integrate automation with ecosystem tooling, including identity providers, endpoint and EDR platforms, and ticketing systems, via REST APIs and custom connectors, and via SOAR platforms where they're the right tool for the job.
• Design and deploy agentic AI systems, including multi-step autonomous workflows with agent orchestration and context engineering, to extend detection and response beyond scripted playbook logic.
• Triage production automation issues as an operational priority, and track metrics for automation coverage, reliability, and time-to-remediate.
• Contribute to Detection-as-Code integration within Detection Engineering's existing standards, and document automation logic for team-wide ownership.
• Actively find ways to integrate AI into day-to-day work, including playbook development, script writing, enrichment logic, triage, incident summarization, testing, and documentation.

WHAT YOU NEED TO SUCCEED
Required:

• 7+ years in security engineering, software engineering, or security automation, with a track record of shipping production-grade code, not just configuring vendor tooling.
• Proven experience designing, building, and operating enterprise-scale APIs, services, or orchestration systems, demonstrated through real delivered projects.
• Hands-on experience building and maintaining SOAR playbooks (Splunk SOAR, Tines, XSOAR, etc.), including custom actions, connectors, and playbook logic in Python.
• Advanced proficiency in Python (or a comparable language) for production automation development.
• Demonstrated experience building or deploying agentic AI systems, such as agent orchestration, prompt or context engineering, or autonomous multi-step workflows, applied to security or operational automation.
• Practical understanding of incident response and security investigative workflows.
• Experience integrating systems with detection/SIEM tooling, identity/access systems, and ticketing/case management systems via REST APIs.
• Ability to work independently on unstructured problems, making defensible, risk-based decisions on containment/response logic.
• Strong written and verbal communication. You'll document system and automation logic for engineers and explain the same tradeoffs to non-technical collaborators.
• Hands-on experience using AI-assisted development tools (e.g., Claude Code, Copilot, Cursor), and judgment on when they help.

Preferred:

• Experience running agentic AI systems in production with real autonomy, where agents initiate containment or response actions with minimal human involvement, or building reusable agent orchestration frameworks adopted by other engineers.
• Experience with identity/access systems (e.g., Okta, Entra ID) for containment actions like session revocation or account disable.
• Comfort with both low-code playbook design and pro-code extensions, writing custom Python when built-in logic isn't enough.
• Experience with event-driven architectures and webhook-based integrations, beyond standard polling REST calls.
• Proficiency in more than one scripting or development language (e.g., PowerShell, Bash, Go) beyond Python.
• Familiarity with Detection-as-Code practices and CI/CD for security content.
• Experience mentoring other engineers or serving as a technical point of contact for automation work.
• Background supporting compliance-relevant controls where automation failures have audit implications.
• Relevant certifications a plus but not required.

About Adobe

Adobe empowers everyone to create through innovative platforms and tools that unleash creativity, productivity and personalized customer experiences. Adobe's industry-leading offerings including Adobe Acrobat Studio, Adobe Express, Adobe Firefly, Creative Cloud, Adobe Experience Platform, Adobe Experience Manager, and GenStudio enable people and businesses to turn ideas into impact, powered by AI and driven by human ingenuity.

Our 30,000+ employees worldwide are creating the future and raising the bar as we drive the next decade of growth. We're on a mission to hire the very best and believe in creating a company culture where all employees are empowered to make an impact. At Adobe, we believe that great ideas can come from anywhere in the organization. The next big idea could be yours.

Let's Adobe together

At Adobe, we believe in creating a company culture where all employees are empowered to make an impact. Learn more about Adobe life, including our values and culture, focus on people, purpose and community, Adobe for All, comprehensive benefits programs, the stories we tell, the customers we serve, and how you can help us advance our mission of empowering everyone to create.

Adobe is proud to be an Equal Employment Opportunity employer. We do not discriminate based on gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other protected characteristic. Learn more.

Adobe aims to make our Careers website and recruiting process accessible to any and all users. If you have a disability or special need that requires accommodation to navigate our website or complete the application process, email accommodations@adobe.com.

AI Use Guidelines for Interviews:
Our interviews are designed to reflect your own skills and thinking. The use of AI or recording tools during live interviews is not permitted unless explicitly invited by the interviewer or approved in advance as part of a reasonable accommodation. If these tools are used inappropriately or in a way that misrepresents your work, your application may not move forward in the process.

At Adobe, we empower employees to innovate with AI - and we look for candidates eager to do the same. As part of the hiring experience, we provide clear guidance on where AI is encouraged during the process and where it's restricted during live interviews. See how we think about AI in the hiring experience.

Expected Pay Range:

At Adobe, for sales roles starting salaries are expressed as total target compensation (TTC = base + commission), and short-term incentives are in the form of sales commission plans. Non-sales roles starting salaries are expressed as base salary and short-term incentives are in the form of the Annual Incentive Plan (AIP).

In addition, certain roles may be eligible for long-term incentives in the form of a new hire equity award.

State-Specific Notices:

California:

Fair Chance Ordinances

Adobe will consider qualified applicants with arrest or conviction records for employment in accordance with state and local laws and "fair chance" ordinances.

Colorado:

Application Window Notice

If this role is open to hiring in Colorado (as listed on the job posting), the application window will remain open until at least the date and time stated above in Pacific Time, in compliance with Colorado pay transparency regulations. If this role does not have Colorado listed as a hiring location, no specific application window applies, and the posting may close at any time based on hiring needs.

Massachusetts:

Massachusetts Legal Notice

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.