Skip to content

Open nowPosted 9 hours ago

Lead Security Automation Consultant (SOAR / Azure) (copy)

Trility Consulting4 open roles

Where
United States
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowLead Security Automation Consultant (SOAR / Azure) (copy)Trility Consulting · United States
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Trility Consulting's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market. Trility Consulting postings stay open a median of 6 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: posted 9 hours ago

Trility Consulting median: 6 days open

The posting

Who We Are

At Trility Consulting®, we’ve built a strong, remote-work culture where people thrive, grow, and support each other – earning us Great Place to Work® Certification. Headquartered in Central Iowa, we embrace flexible schedules and collaboration across geographically distributed teams serving clients from all corners of the United States and globally.

We seek team members with the grit necessary to forge paths where none previously existed, to get back up when circumstances knock them down, to adapt to the changing needs of the client even when it is uncomfortable, and to deliver on our commitments. Candidates must respect and value people, recognize that over-communication is barely good enough, thrive on solving complex problems, have a passion for building teams, and know that delivering what a client actually values is more important than their own predispositions. They understand value proposition, love delivering value, and take pride in learning the expansive and ever-changing business of clients. Candidates are self-motivated and relentlessly working to become more today than they were yesterday.

What You Will Do & The Experience You Will Need

Key Responsibilities

  • Design, develop, and implement security automation workflows across several defined client use cases
  • Build integrations between security platforms, ServiceNow, and other enterprise applications using REST APIs and Microsoft Graph
  • Develop and maintain Python-based Azure Functions to support automation and integration requirements
  • Build and work with KQL queries, particularly Microsoft Defender advanced hunting, to retrieve, filter, and analyze security data
  • Develop automated workflows using Tines or comparable security orchestration and automation platforms
  • Integrate security alerts, incident data, and case-handling processes with ServiceNow
  • Work with Microsoft Entra ID to support identity-related automation, including group membership changes and application registration credentials
  • Implement Azure DevOps pipelines to deploy Azure Functions and support controlled release processes
  • Work within the client's change-control and approval processes to ensure changes are properly reviewed, tested, and deployed
  • Troubleshoot, test, and optimize automation workflows and integrations to ensure reliability
  • Build reusable components that other engineers can extend, develop supporting runbooks, and lead knowledge-transfer sessions with the client's engineer
  • Collaborate with client stakeholders to understand requirements and translate them into practical automation solutions

What You Bring

  • 5+ years of experience in security engineering, security automation, systems integration, or a related technical discipline
  • Hands-on experience designing and implementing security automation or workflow automation solutions
  • Strong Python development experience, including building and deploying Azure Functions
  • Experience writing and working with Kusto Query Language (KQL), particularly Microsoft Defender advanced hunting
  • Experience integrating ServiceNow with security platforms or other enterprise applications
  • Strong experience building and consuming REST APIs and developing application integrations
  • Experience with Microsoft Graph and Microsoft Entra ID, including automating group membership changes and working with application registration credentials
  • Experience implementing Azure DevOps pipelines to deploy Azure Functions
  • Experience working within structured change-control and approval processes
  • Experience with a security orchestration or workflow automation platform such as Tines, Torq, Swimlane, Splunk SOAR, Cortex XSOAR, or Microsoft Sentinel Playbooks/Azure Logic Apps
  • Ability to independently develop, troubleshoot, and deliver working automation solutions within a defined project timeline
  • Strong problem-solving, communication, documentation, and knowledge-sharing skills

Preferred Experience

  • Direct, hands-on experience with Tines
  • Experience with Microsoft Sentinel and Sentinel playbooks
  • Experience with Defender for Office 365 or Proofpoint email and click data
  • Experience working with Tenable and Common Vulnerabilities and Exposures (CVE) data
  • Experience integrating or working with Hunters security platform
  • Familiarity with n8n, Power Automate, Workato, or other workflow automation platforms
  • Experience building security triage, ticketing, and case-management workflows
  • Experience working in a consulting or professional services environment

How We Put You First

Trility’s culture is built upon the journey, character, and work ethic of our team members. We are a team of honorable and professional lifelong learners who work together to solve problems proactively.

• Work remotely anywhere in the United States with flexible work hours

• Sponsored and supported learning opportunities

Job Requirements

• Must reside within the United States

• Must be authorized to work in the United States without sponsorship now or in the future

• Must be able to pass a background check

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Trility Consulting's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Trility Consulting's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Trility Consulting's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.