Security Automation Engineer

About the Role:

Security Automation Engineer

Key Responsibilities:

• Design, develop, and maintain security automation workflows and playbooks using scripting and automation tools.
  
• Integrate security tools (SIEM, SOAR, IDS/IPS, endpoint security) into automated detection and response systems.
  
• Develop and maintain APIs and connectors for security tools integration.
  
• Automate incident detection, triage, and response processes to reduce manual workload.
  
• Collaborate with DevSecOps teams to embed security automation into CI/CD pipelines.
  
• Monitor, troubleshoot, and optimize automated security workflows.
  
• Conduct regular reviews and updates of security automation rules and playbooks.
  
• Stay updated on the latest security threats, tools, and automation technologies.
  
• Provide documentation, training, and support for security automation processes.

Preferred Skills:

• Experience with cloud security automation (AWS, Azure, GCP).
  
• Knowledge of infrastructure-as-code tools (Terraform, Ansible).
  
• Familiarity with container security and orchestration platforms (Docker, Kubernetes).
  
• Certifications such as CISSP, CEH, GIAC, or relevant security automation credentials.
  
• Experience with machine learning or AI in security automation.