Security Automation Engineer

Overview

Build and maintain security automation pipelines and tooling for AI-driven security detections, investigations, and responses. You’ll work with security, AI/ML, and engineering teams to turn manual processes into reliable, testable workflows.

What you'll do

• Design, build, and operate SOAR playbooks and agentic AI workflows for alert triage and response.
• Translate detection logic and AI model outputs into actionable, low-noise alerts.
• Integrate security tools with AI inference services via APIs, event streaming, and orchestration frameworks.
• Add observability using metrics, logging, and alerting for automated pipeline reliability.
• Write and run tests for playbooks and automation logic.
• Validate automated responses using purple-team exercises and tabletop simulations.
• Partner with AI/ML, DevSecOps, and IT teams to embed security automation into change management workflows.

What you'll need

• 5+ years in security engineering, SecOps, or automation roles.
• Proficiency in Python and/or Go for scripting and tooling.
• Hands-on SOAR experience with tools such as Splunk SOAR, Palo Alto XSOAR, or Tines.
• Experience with SIEM platforms such as Splunk, Microsoft Sentinel, or Google Chronicle.
• REST API integration and event-driven architecture experience.
• Understanding of threat detection logic (MITRE ATT&CK, kill chain).
• Version control and CI/CD practices (Git, GitHub Actions).

Details

• Works at the intersection of security engineering and AI systems.