SOAR Automation Engineer
Columbus, Georgia, USA
Global Payments
Every day, Global Payments makes it possible for millions of people to move money between buyers and sellers using our payments solutions for credit, debit, prepaid and merchant services. Our worldwide team helps over 3 million companies, more than 1,300 financial institutions and over 600 million cardholders grow with confidence and achieve amazing results. We are driven by our passion for success and we are proud to deliver best-in-class payment technology and software solutions. Join our dynamic team and make your mark on the payments technology landscape of tomorrow.
The Sr. SOAR Automation Engineer at Global Payments will be responsible for designing, building, and managing automated workflows to enhance the efficiency and effectiveness of the Cyber Security division. This role involves developing and maintaining automated responses to both common and complex security threats, optimizing the incident response process, and ensuring streamlined operations across the organization’s global payment ecosystem.
Key Responsibilities:
Automation Development: Create and implement SOAR playbooks for various security use cases, including phishing, malware analysis, insider threat response, and other automated processes required across Cyber Security. Use Case Collaboration: Work with teams in SOC, SIEM, Insider Threat, and Incident Response to gather requirements and ensure that automation aligns with security needs and business objectives. Platform Management: Oversee the SOAR platform, optimizing integrations with other security tools and maintaining robust performance through updates and customizations. Operational Efficiency: Identify opportunities for further automation to reduce manual workloads, speed up response times, and enable teams to prioritize high-impact threats. Mentorship and Training: Provide guidance to junior team members by sharing SOAR best practices, troubleshooting techniques, and fostering a culture of continuous improvement. Metrics and Reporting: Track SOAR platform performance, report on efficiency gains, and provide insights on ROI from automation efforts.
Required Experience and Skills:
- Extensive SOAR Experience: 5+ years of hands-on experience with SOAR platforms (e.g., Palo Alto Cortex XSOAR, Splunk Phantom, IBM Resilient).
- Incident Response Knowledge: Strong background in incident response, particularly in high-stakes environments like financial or global payments.
- Programming Proficiency: Proficiency in Python, JavaScript, or other languages commonly used in SOAR playbook development.
- Security Tool Integrations: Experience with SIEM, EDR, threat intelligence, and other tools commonly integrated into SOAR.
- Communication Skills: Ability to translate technical requirements into actionable automation solutions for stakeholders across Cyber Security.
Additional Skills and Capabilities:
- Problem-Solving Skills: Highly analytical mindset with strong problem-solving abilities, able to troubleshoot complex technical issues.
- Project Management: Strong organizational skills and experience managing multiple projects, ensuring timely and efficient completion of automation initiatives.
- Attention to Detail: Precision in creating workflows and playbooks, ensuring accurate and reliable automation of security responses.
- Team Collaboration: Excellent interpersonal skills to work effectively with diverse teams and stakeholders within Cyber Security and beyond.
Educational Requirements:
- Bachelor’s Degree in Computer Science, Cybersecurity, Information Technology, or a related field; or equivalent relevant experience.
- Certifications (preferred): Relevant industry certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), GIAC Certified Incident Handler (GCIH), or certifications specific to SOAR platforms like Palo Alto or Splunk.
Strategic Importance of the Role: This role is critical for scaling the Cyber Security division’s capabilities, mitigating operational strain, and enabling advanced threat response measures essential to safeguarding Global Payments’ ecosystem.
At Global Payments our vision is to be “Champions of Inclusion.” We are fully committed and focused on creating a better tomorrow in the communities in which we live and work. We aspire to ensure fair treatment, access, opportunity and advancement for all team members. We believe all team members should be able to bring their true, authentic selves to the workplace and feel accepted, engaged and understood.
Global Payments offers a comprehensive benefits package to all of our team members, including medical, dental and vision care, EAP programs, paid time off, recognition programs, retirement and investment options, charitable gift matching programs, and worldwide days of service. To learn more, review our Benefits page at: https://jobs.globalpayments.com/en/why-global-payments/benefits/
Global Payments Inc. is an equal opportunity employer. Global Payments provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy), national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information or any other basis protected by law. If you wish to request reasonable accommodations related to applying for employment or provide feedback about the accessibility of this website, please contact jobs@globalpay.com.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Automation CEH CISSP Computer Science EDR GCIH GIAC Incident response JavaScript Malware Python SIEM SOAR SOC Splunk Threat intelligence XSOAR
Perks/benefits: Career development Health care
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.