Security Automation Engineer

Overview

Security Automation Engineer focused on designing and operating AI-augmented security operations automation for detections, investigations, and responses.

What you'll do

• Design and operate SOAR playbooks and agentic AI workflows to triage, enrich, and respond to security alerts.
• Translate detection logic and AI model outputs into actionable, low-noise alerts.
• Build and maintain integrations between security tools and AI inference services using APIs, event streaming, and orchestration frameworks.
• Instrument automation pipelines with metrics, logging, and alerting for observability and reliability.
• Write tests for playbooks and automation logic and validate with purple-team/tabletop exercises.
• Partner with AI/ML, DevSecOps, and IT teams to embed security automation into infrastructure change management.

What you'll need

• 5+ years in security engineering, SecOps, or automation roles.
• Proficiency in Python and/or Go for scripting and tooling.
• Hands-on SOAR experience (Splunk SOAR, Palo Alto XSOAR, Tines, or similar).
• Experience with SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle).
• REST API integration and event-driven architecture experience.
• Understanding of threat detection logic (MITRE ATT&CK, kill chain).

Details

• Location: Bengaluru.