Security Automation Engineer

Overview

Security Automation Engineer responsible for designing, developing, and maintaining security automation solutions across Operational Security. Builds SOAR playbooks, integrations, scripts, and orchestration pipelines to reduce manual workloads.

What you'll do

• Develop SOAR playbooks and automations for alert triage, enrichment, containment, and remediation.
• Build reusable automation components, scripts, and integrations.
• Implement automation scripting using Python, PowerShell, and REST APIs.
• Integrate SOAR with SIEM, EDR, TIP, cloud-native security tools, and case management systems.
• Engineer API integrations, webhooks, and event-driven automation triggers.
• Embed AI/ML-driven enrichment and correlation logic into automated workflows.
• Translate SOPs and runbooks into automated, consistent, auditable, and compliant processes.

What you'll need

• Experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, or Chronicle SOAR.
• Proficiency in Python and/or PowerShell for automation development.
• Strong understanding of REST APIs, JSON, and event-driven automation.
• Experience integrating SIEM, EDR, TIP, and cloud-native security tools.
• Understanding of SOC, Incident Response, Threat Hunting, and Detection Engineering workflows.
• Strong communication and documentation skills.

Details

• Location: Chennai, India.
• Work mode: Hybrid; teams in the office around four days a week.
• Reports under the Automation Lead.