Sr. Security Engineer - SOAR

CREATIVITY IS OUR SUPERPOWER. It’s our heritage and it’s also our future. Because we don’t just make toys. We create innovative products and experiences that inspire fans, entertain audiences and develop children through play. Mattel is at its best when every member of our team feels respected, included, and heard—when everyone can show up as themselves and do their best work every day. We value and share an infinite range of ideas and voices that evolve and broaden our perspectives with a reach that extends into all our brands, partners, and suppliers.

**Roles and Responsibilities**

• Architect, implement, and maintain Security Orchestration, Automation, and Response (SOAR) solutions, developing custom automation playbooks, scripts, and integrations across EDR, ITP, DLP, IAM, and cloud environments to optimize and scale cybersecurity operations.
• Leverage AI and ML technologies to improve event correlation, detection accuracy, and decision-making efficiency within the SOC ecosystem, integrating automation pipelines with SIEM platforms (e.g., Splunk, Sumo Logic) to enrich alerts and reduce false positives.
• Design and maintain REST API-based integrations between security, IT, and business systems, and develop automation scripts using Python, PowerShell, or Bash to streamline investigation and remediation tasks.
• Collaborate with SOC, Incident Response, and Threat Hunting teams to identify repetitive processes and automate triage, containment, and recovery workflows.
• Partner with IT, Engineering, and Cloud Operations teams to integrate automated security controls into CI/CD and DevOps pipelines.
• Create dashboards, metrics, and reporting mechanisms to measure automation efficiency, performance, and operational outcomes.
• Maintain and document playbooks, workflows, and standard operating procedures (SOPs) to ensure repeatability, quality, and compliance, while providing technical mentorship to promote automation-first practices across security teams.
• Collaborate with Security Engineering leadership to align automation initiatives with the organization's global cybersecurity strategy and evaluate emerging AI-driven and cloud-native security automation technologies.

• 6–8 years of experience in security engineering, operations, or automation, with a focus on orchestration and integrations. 

• Proven expertise in designing, deploying, and maintaining SOAR platforms such as Cortex XSOAR, Splunk SOAR, or similar solutions. 

• Hands-on experience developing automation playbooks and custom integrations using APIs, scripting, and modern programming frameworks. 

• Strong understanding of AI/ML technologies applied in cybersecurity analytics, enrichment, and detection workflows. 

• Experience with SIEM systems (e.g., Splunk, Sumo Logic) for log correlation, enrichment, and automated response capabilities. 

• Proficiency in Python (preferred), with additional experience in PowerShell, Bash, or JavaScript beneficial. 

• Deep understanding of REST APIs, JSON, and webhooks for security data exchange and automation workflows. 

• Solid grasp of cloud security automation principles across Azure, AWS, and GCP environments. 

• Familiarity with Infrastructure-as-Code concepts (Terraform, Ansible) and CI/CD integrations for scalable security deployments. 

• Excellent problem-solving, communication, and collaboration skills with the ability to drive innovation and cross-functional alignment. 

Preferred: 

• Bachelor’s degree in Cybersecurity, Computer Science, or a related technical field (or equivalent experience). 

• Certifications such as GIAC Security Automation Engineer (GSAE), GIAC Cloud Security Automation (GCSA), or Splunk SOAR Certified Automation Developer. 

• Experience developing and maintaining event enrichment pipelines and automated detection validation workflows. 

• Knowledge of security frameworks and methodologies such as MITRE ATT&CK, NIST, and zero-trust architecture principles. 

• Experience integrating automation and orchestration solutions into enterprise SIEM, SOAR, and endpoint security ecosystems. 

• Strong understanding of metrics-driven performance management for security automation programs. 

Shift Timings: 

This position operates during 05:00–14:00 PST (18:30–03:30 IST), Monday through Friday, with emergency on-call duties as required. 

Don’t meet every single requirement? At Mattel, we are dedicated to an inclusive workplace and a culture of belonging. If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we still encourage you to apply. You may be just the right candidate for this or other roles.

How We Work:
We are a purpose driven company aiming to empower generations to explore the wonder of childhood and reach their full potential. We live up to our purpose employing the following behaviors:

• We collaborate: Being a part of Mattel means being part of one team with shared values and common goals. Every person counts and working closely together always brings better results. Partnership is our process and our collective capabilities is our superpower.
• We innovate: At Mattel we always aim to find new and better ways to create innovative products and experiences. No matter where you work in the organization, you can always make a difference and have real impact. We welcome new ideas and value new initiatives that challenge conventional thinking.
• We execute: We are a performance-driven company. We strive for excellence and are focused on pursuing best-in-class outcomes. We believe in accountability and ownership and know that our people are at their best when they are empowered to create and deliver results.

Our Approach to Flexible Work:
We embrace a flexible work model designed to empower a culture of growth, optimism, and wellbeing, where every employee can reach their full potential. Combining purposeful in-person collaboration with flexibility, our focus is to optimize performance and drive connection for moments that matter.

Who We Are:
Mattel is a leading global toy and family entertainment company and owner of one of the most iconic brand portfolios in the world. We engage consumers and fans through our franchise brands, including Barbie, Hot Wheels, Fisher-Price, American Girl, Thomas & Friends, UNO, Masters of the Universe, Matchbox, Monster High, MEGA and Polly Pocket, as well as other popular properties that we own or license in partnership with global entertainment companies. Our offerings include toys, content, consumer products, digital and live experiences. Our products are sold in collaboration with the world’s leading retail and ecommerce companies. Since its founding in 1945, Mattel is proud to be a trusted partner in empowering generations to explore the wonder of childhood and reach their full potential.

Mattel’s award-winning workplace culture has been recognized by Forbes, Fast Company, Newsweek, Great Place to Work, TIME, and more.

Visit us at https://jobs.mattel.com/ and www.instagram.com/MattelCareers.

Mattel is an Equal Opportunity Employer where we want you to bring your authentic self to work every day. We welcome all job seekers, and all applicants will receive consideration for employment.

Videos to watch:
The Culture at Mattel
Corporate Philanthropy