SOAR developer - Automation engineer
Location: Poland
Division: Chief Information Security Office (CISO)
As a global critical financial infrastructure, the protection of Euroclear information and assets is fundamental to the company’s business. Information Security is at the core of our services, firmly embedded in the management systems and processes of the company. You will be joining our Chief Information Security Office in charge of putting in place the required controls to adequately and effectively protect our information assets.
We’re looking for a SOAR Developer to design, build, and maintain automation capabilities that strengthen our security operations.
You’ll collaborate closely with Incident Response, Threat Detection Engineering, SOC analysts, and platform teams to deliver high‑quality playbooks, integrations, and workflows.
What You’ll Do:
- Build and refine SOAR playbooks, automations, integrations, dashboards, and orchestration logic.
- Communicate and demonstrate new or updated workflows to operational teams.
- Ensure automation content is production‑ready with clear, maintainable documentation.
- Continuously monitor and optimize workflows to improve reliability, efficiency, and stability.
- Maintain and update SOAR workflows, integrations, content packs, and vendor modules.
- Promote content across environments using Git‑based version control and peer reviews.
What You Bring:
- Strong Python skills for automation and integrations.
- Experience with REST APIs (OAuth2, API keys), JSON, and common web service standards.
- Hands‑on experience with automation testing: functional, scenario‑based, regression, and integration.
- Experience managing SOAR content across multi‑stage environments (dev → integration → prod).
- Knowledge of secure development practices, logging/auditing safeguards, and safe API handling.
- Understanding of IR workflows (triage, investigation, containment). SOC/IR experience is a plus.
- Solid understanding of SIEM, EDR, logging pipelines, network/security fundamentals.
- 3+ years in SOAR engineering, security automation, SOC engineering, or IR‑related roles.
- Hands‑on experience with Palo Alto Cortex XSOAR (Demisto).
Nice to Have:
- Modular, reusable SOAR components (sub‑playbooks, automation templates).
- CI/CD experience for validation and promotion of SOAR content.
- Experience maintaining XSOAR content packs or marketplace integrations.
- Additional scripting (JavaScript, PowerShell).
- Integrating SIEM and email ingestion sources (Splunk ES, MS Graph Mail API).
- Integration of external platforms (EDR, Azure, ServiceNow).
- Familiarity with event‑driven workflows (webhooks, async APIs, message triggers).
Soft Skills That Make You Great:
- Clear and confident communicator with both technical and non‑technical audiences.
- Analytical, structured, and methodical problem‑solver.
- Collaborative, open‑minded, autonomous, and reliable.
- Fast learner with strong attention to detail and disciplined documentation habits.
- Comfortable in fast‑changing environments and able to manage multiple priorities.
ABOUT US
Why Join Us
Embark on your new adventure at Euroclear, and work at the heart of the global capital markets. We connect over 2,000 financial institutions across the globe. As an open and resilient infrastructure, we contribute to the stability of the financial markets. We help clients cut through complexity, lower costs, and mitigate risks of financial transactions. At Euroclear, we have a clear ambition to use our key role to facilitate and accelerate a sustainable global financial system.
What We Offer
- Work closely with inspiring, supportive, and engaged colleagues from more than 80 different countries
- Practice your talents in a highly professional international environment
- Join a learning and development environment with an emphasis on knowledge sharing and training
- Competitive salary and comprehensive benefits
New Ways of Working
Find your own optimal balance within our hybrid working model, where you can connect at the office and at the same time benefit from remote working.
Great Place to Work for All
We are committed to creating an inclusive culture that celebrates diversity and strives to be a Great Place to Work for All. All qualified applicants will be considered for employment, regardless of any aspect that makes them unique (including race, religion, national origin, gender, sexual orientation, age, marital status, pregnancy, disability, ...). If you need any specific accommodation due to disability or any other reason, you can let the recruiter know during your application process.
About the team
The Cyber Defence Centre provides continuous identification, monitoring and response to threats to the Euroclear infrastructure, applications and data. It is designed as the last line of defence for the organisation, in the event that actors; both internal and external have penetrated our preventative cyber controls with malicious intent.
About Us
Why join us
Embark on your new adventure at Euroclear, and work at the heart of the global capital markets. We connect over 2,000 financial institutions across the globe. As an open and resilient infrastructure, we contribute to the stability of the financial markets. We help clients cut through complexity, lower costs, and mitigate risks of financial transactions. At Euroclear, we have the clear ambition to use our key role to facilitate and accelerate a sustainable global financial system.
What We Offer:
- Work closely with inspiring, supportive and engaged colleagues from more than 80 different countries.
- Practice your talents in a highly professional international environment.
- Join a learning and development environment with an emphasis on knowledge sharing and training.
- Competitive salary and comprehensive benefits.
Ways of working
Find your own optimal balance within our hybrid working model, where you can connect at the office 8 days a month and also benefit from remote working.
Great Place to Work for All
We are committed to creating an inclusive culture that celebrates diversity and strives to be a Great Place to Work for All. All qualified applicants will be considered for employment, regardless of any aspect that makes them unique (including race, religion, national origin, gender, sexual orientation, age, marital status, pregnancy, disability, ...). If you need any specific accommodation due to disability or any other reason, you can let the recruiter know during your application process. Our values guide how we work together and shape our future: Our mission and values - Euroclear
About the Organization
As a global critical financial infrastructure, the protection of Euroclear information and assets is fundamental to the companys' business. Security is at the core of our services, firmly embedded in the management systems and processes of the company. You will be joining our Chief Information Security Office (CISO) in charge of putting in place the required controls to adequately and effectively protect our information assets. The Cyber Defence Centre is responsible for Threat Identification, Threat Detection and Threat Response.There are more than 50,000 engineering jobs:
Subscribe to membership and unlock all jobs
Engineering Jobs
60,000+ jobs from 4,500+ well-funded companies
Updated Daily
New jobs are added every day as companies post them
Refined Search
Use filters like skill, location, etc to narrow results
Become a member
🥳🥳🥳 452 happy customers and counting...
Overall, over 80% of customers chose to renew their subscriptions after the initial sign-up.
To try it out
For active job seekers
For those who are passive looking
Cancel anytime
Frequently Asked Questions
- We prioritize job seekers as our customers, unlike bigger job sites, by charging a small fee to provide them with curated access to the best companies and up-to-date jobs. This focus allows us to deliver a more personalized and effective job search experience.
- We've got over 200,000 jobs from 15,000+ vetted companies. No fake or sleazy jobs here!
- We aggregate jobs from 15,000+ companies' career pages, so you can be sure that you're getting the most up-to-date and relevant jobs.
- We're the only job board *for* software engineers, *by* software engineers… in case you needed a reminder! We add thousands of new jobs daily and offer powerful search filters just for you. 🛠️
- Every single hour! We add 2,000-3,000 new jobs daily, so you'll always have fresh opportunities. 🚀
- Typically, job searches take 3-6 months. EchoJobs helps you spend more time applying and less time hunting. 🎯
- Check daily! We're always updating with new jobs. Set up job alerts for even quicker access. 📅
What Fellow Engineers Say