Type: Full-time | Compensation: Competitive | Location: Remote (US-based)
As an Automation Engineer, you will help customers automate their security operations using Legion. This is a customer-facing role focused on designing, implementing, and optimizing automation workflows that deliver real operational value. You sit at the intersection of solution architecture, SOC operations, and customer success, working closely with customers and internal teams to maximize platform impact. This role is ideal for engineers who enjoy building workflows in SOAR platforms or tools like n8n.
Lead technical discovery to understand SOC workflows, incident response processes, tech stack, and constraints.
Design and deliver production-ready automation workflows.
Test, tune, and optimize workflows for reliability and performance.
Deliver technical workshops and enablement sessions for analysts, engineers, and leadership.
Troubleshoot issues across authentication, AI reasoning, and workflow logic.
Contribute reusable solutions, best practices, and mentor peers.
Automation workflows delivered quickly, maintaining strong POV velocity.
Enterprise customers reach production on schedule with high realized value.
Reduced analyst toil and improved response consistency through automation.
High-quality implementations that reduce escalations and enable account expansion.
4+ years in security engineering, systems engineering, or security automation.
Strong understanding of SOC operations and incident response.
Proficiency in scripting and automation (Python, PowerShell, Bash), APIs, and JSON integrations.
Fully remote (North America); occasional customer travel.