Information Security Engineer – Security Automation and Response

Responsibilities

• Develop, implement, and maintain SOAR playbooks to automate repetitive security tasks such as alert triage and incident response.
• Use Python and API integrations to streamline security workflows and improve SOC operational efficiency.
• Investigate malware, intrusions, unauthorized access, and data exfiltration events.
• Analyze logs, memory, disk images, and network captures to determine attack scope and impact.
• Support initiatives to advance Security Operations capabilities using AI-driven workflows.
• Participate in Purple Team activities and on-call rotations to respond to critical security events.
• Utilize SIEM platforms and query languages (Yara-L, CQL, SPL, etc.) for threat detection.

Requirements

• BS or BA degree in Computer Science, Engineering, or equivalent work experience.
• 5 years of professional security experience.
• Proven experience in SOAR playbook development.
• Proficiency in scripting or programming languages such as Python, PowerShell, or Go.
• Strong background in Incident Response, threat investigation, and threat detection.
• Solid understanding of logging systems, computing systems, and network architecture.
• Excellent written and verbal communication skills.

Preferred Qualifications

• Relevant security certifications such as GIAC or CISSP.

About the Company

UChicago Medicine is one of the nation’s most comprehensive academic medical centers. We provide superior healthcare with compassion, working to advance medical innovation and serve the health needs of our community. Join us in doing work that really matters.