Cybersecurity Automation Engineer

Job description

Job responsibilities

• Design, build, and maintain automation workflows across SIEM, SOAR, endpoint security, identity, vulnerability management, cloud, and ticketing platforms.
• Develop integrations using REST APIs, web-hooks, SDKs, and scripting languages such as Python and PowerShell.
• Automate alert enrichment, investigation support, case creation, evidence collection, notifications, and incident response actions.
• Engineer workflows that correlate information across platforms to improve visibility, reduce manual effort, and support faster security decisions.
• Partner with security analysts and incident responders to identify automation opportunities and translate operational playbooks into technical workflows.
• Automate vulnerability management activities, including asset enrichment, remediation ticket creation, ownership assignment, escalation, and closure validation.
• Build appropriate safeguards into automated actions, including approval requirements, access restrictions, validation checks, and rollback procedures.
• Implement secure authentication, secrets management, least-privilege access, and audit logging for integrations and service accounts.

Job requirements

• Three or more years of experience in security engineering, security automation, software development, or a related technical discipline.
• Demonstrated experience developing and maintaining automation solutions using Python, PowerShell, or comparable languages.
• Practical experience integrating enterprise platforms through APIs, including authentication, JSON data handling, pagination, and error handling.
• Working knowledge of security operations, incident response processes, and common endpoint, identity, network, and cloud threats.
• Experience with SIEM or SOAR platforms and workflow orchestration tools.
• Familiarity with Git, code review, testing, and secure development practices.
• Ability to troubleshoot complex workflows and dependencies across multiple systems.
• Strong written and verbal communication skills, including the ability to explain technical solutions to nontechnical stakeholders.