Security Automation Engineer

About the Role:

Security Automation Engineer

Key Responsibilities:

Security Automation & Orchestration

• Design, implement, and manage

  security automation workflows

  using

  SOAR (Security Orchestration, Automation, and Response)

  platforms (e.g., Splunk SOAR, Cortex XSOAR, Swimlane, Tines).
• Develop

  custom scripts and integrations

  to automate repetitive security tasks such as incident triage, enrichment, containment, and remediation.
• Build

  API-based integrations

  across diverse security and IT tools (e.g., SIEM, EDR, IAM, vulnerability scanners, ticketing systems).
• Optimize playbooks for

  incident response, threat hunting, and vulnerability management

  .

Security Engineering & Tooling

• Collaborate with SOC and Threat Intelligence teams to enhance

  detection and response automation

  .
• Integrate and automate security capabilities across

  cloud environments (AWS, Azure, GCP)

  .
• Support deployment and management of

  security infrastructure

  , including SIEMs, endpoint protection platforms, and log aggregation systems.

Preferred Qualifications:

• Experience with

  infrastructure-as-code (IaC)

  tools (Terraform, Ansible, or CloudFormation).
• Familiarity with

  DevOps toolchains

  (Jenkins, GitHub Actions, GitLab CI/CD) and

  container security

  (Kubernetes, Docker).
• Knowledge of

  threat intelligence platforms (TIPs)

  and automated enrichment techniques.
• Understanding of

  Zero Trust Architecture

  and

  security compliance automation

  .