Security
SOAR
Also written as Security Orchestration Automation and Response, Security Automation
Tooling that automates the repetitive steps of handling a security alert — gathering context, isolating a machine, opening a ticket — so analysts spend their time on the judgment calls.
Think of it like
An assistant who has already pulled the file and drafted the paperwork before the case reaches your desk.
Junior or senior?
Almost always sits next to SIEM in a job description.
Senior sounds like
Automated a specific alert type end to end, and can say what they deliberately kept manual.
Ask them
“Which alert type did you automate first, and what did you refuse to automate?”