Security Automation Engineer

Overview

Security Automation Engineer to build AI-augmented Security Operations automation pipelines and tooling for detections, investigations, and responses that run at machine speed.

What you'll do

• Design and operate SOAR playbooks and agentic AI workflows to triage, enrich, and respond to security alerts with minimal human intervention.
• Translate detection logic and AI model outputs into actionable, low-noise alerts and automate feedback loops to improve signal quality.
• Build and maintain integrations between security tools (SIEM, EDR, TIP, identity platforms) and AI inference services via APIs, event streaming, and orchestration.
• Add observability to automation pipelines with metrics, logging, and alerting for production verification.
• Write tests for playbooks and automation logic and validate behavior via purple-team exercises and tabletop simulations.
• Collaborate with AI/ML, DevSecOps, and IT teams to embed security automation into infrastructure change management workflows.

What you'll need

• 5+ years in security engineering, SecOps, or automation roles.
• Proficiency in Python and/or Go for scripting and tooling.
• Hands-on SOAR experience (Splunk SOAR, Palo Alto XSOAR, Tines, or similar).
• Experience with SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle).
• REST API integration and event-driven architecture experience.
• Understanding of threat detection logic (MITRE ATT&CK, kill chain).
• Version control and CI/CD practices (Git, GitHub Actions) experience.

Details

• Location: Delhi.