We are seeking a highly skilled Security Automation Engineer to serve as a technical leader responsible for the design, implementation, optimization, and operational support of enterprise security automation platforms and workflows. This role combines hands-on engineering, automation architecture, and operational support responsibilities across multiple cybersecurity technologies, with a strong emphasis on SOAR, workflow automation, API integrations, and security operations.

The ideal candidate is an experienced security automation professional who can balance strategic automation architecture with day-to-day engineering responsibilities. You will partner closely with Security Operations, Infrastructure, Network, Identity, Cloud, and Application teams to develop scalable automation solutions that improve operational efficiency, reduce manual effort, strengthen security response capabilities, and drive measurable improvements across the cybersecurity program.

Key Responsibilities

Security Automation Architecture

• Design, implement, and optimize enterprise security automation solutions supporting on-premises, cloud, and hybrid environments.

• Architect scalable automation workflows utilizing SOAR platforms, APIs, scripting, and cloud-native technologies to improve security operations and operational resilience.

• Lead evaluations, Proofs of Concept (POCs), and implementation of new automation platforms, integrations, and security technologies.

• Develop automation standards, reusable frameworks, and best practices to support enterprise cybersecurity initiatives.

• Collaborate with Security Operations, Infrastructure, Identity, Network, Cloud, and Application teams to deliver secure, scalable automation capabilities.

Engineering & Operations

• Design, develop, deploy, and maintain custom automation workflows, applications, integrations, and orchestration pipelines.

• Build automation solutions that improve Vulnerability Management, Incident Response, Identity & Access Management (IAM), and other cybersecurity operational processes.

• Develop API integrations between security tools, cloud platforms, and enterprise applications to streamline security workflows.

• Automate repetitive operational tasks, security investigations, alert triage, and remediation activities to improve operational efficiency and reduce response times.

• Troubleshoot complex automation workflows, integrations, and production issues while performing root cause analysis and implementing long-term improvements.

• Monitor automation platform health, workflow performance, and operational effectiveness using enterprise monitoring and observability tools.

• Participate in production support and critical incident response activities for security automation services.

Security Automation & Governance

• Develop and maintain reusable automation frameworks, coding standards, configuration management processes, and operational procedures.

• Establish automation metrics, dashboards, and Key Performance Indicators (KPIs) to measure the effectiveness and maturity of the cybersecurity program.

• Ensure automation solutions align with organizational security policies, governance standards, and regulatory requirements.

• Develop and maintain runbooks, playbooks, technical documentation, and operational standards supporting security automation platforms.

• Evaluate emerging automation technologies, open-source solutions, and industry best practices to continuously improve operational capabilities.

Leadership & Collaboration

• Provide technical leadership and mentorship across security automation initiatives.

• Lead technical discussions with Security Operations, Infrastructure, Identity, Cloud, Network, and Application teams to deliver integrated automation solutions.

• Partner with engineering teams to identify automation opportunities that reduce operational overhead and improve service delivery.

• Share knowledge through documentation, technical guidance, and cross-functional collaboration.

• Drive continuous improvement initiatives focused on automation maturity, operational excellence, service reliability, and customer experience.

Required Qualifications

• Minimum of five (5) years of experience in security automation, cybersecurity engineering, software engineering, or infrastructure automation.

• Minimum of five (5) years of hands-on experience with Tines or enterprise SOAR platforms such as Torq, Splunk SOAR (Phantom), Cortex XSOAR, or similar technologies.

• Experience designing, implementing, and supporting enterprise security automation solutions.

• Strong experience developing automation using Python, PowerShell, JavaScript, or similar scripting languages.

• Experience building and maintaining API integrations across security tools, cloud platforms, and enterprise applications.

• Strong understanding of:

• Security Operations (SOC)

• Security Automation and Orchestration (SOAR)

• Vulnerability Management

• Incident Response

• Identity and Access Management (IAM/SSO)

• Cloud security concepts

• REST APIs and integration frameworks

• Software engineering and automation best practices

• Experience troubleshooting complex production issues and serving as a senior technical resource.

• Familiarity with cloud platforms including AWS, Azure, or Google Cloud Platform.

• Excellent analytical, troubleshooting, documentation, and communication skills.

Preferred Qualifications

• Experience integrating enterprise security technologies including vulnerability management, SIEM, endpoint security, IAM, and cloud security platforms.

• Experience with Infrastructure as Code (Terraform, CloudFormation, or similar) and CI/CD pipelines.

• Familiarity with container technologies such as Docker and Kubernetes.

• Experience working with SaaS platforms and cloud-native architectures.

• Relevant industry certifications such as Security+, GSEC, GCSA, GCIH, CySA+, Azure Security Engineer, AWS Security Specialty, or equivalent.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related field (or equivalent experience).

What We're Looking For

We're looking for a hands-on security automation expert who enjoys solving complex technical challenges and improving cybersecurity operations through automation. The ideal candidate combines strong software engineering skills with deep knowledge of security operations, workflow automation, and enterprise integrations.

Success in this role requires someone who can:

• Design and implement scalable security automation solutions.

• Develop reusable automation frameworks that improve operational efficiency and reduce manual effort.

• Lead complex troubleshooting efforts and serve as a senior technical resource.

• Balance strategic automation architecture with hands-on engineering.

• Collaborate effectively across Security, Infrastructure, Identity, Network, Cloud, and Application teams.

• Continuously improve cybersecurity operations through automation, process optimization, and technical leadership.

Estimated base salary range: $106,700-130,500 USD/annually

#LI-MF1

#LI-Remote

The base pay range shown is a guideline and reasonable estimate for this role. It takes into account the wide variety of factors that are considered in making compensation decisions. Actual compensation offered may vary from the posted range based upon geographic location, work experience, skill level, certifications, and other business and organizational needs. Non- sales roles may be eligible to participate in a discretionary annual incentive plan. Sales roles may be eligible to participate in a sales incentive plan.

Additionally, this position may be eligible for certain benefits, such as health insurance, life insurance, disability retirement plans, paid time off.

The posting will be active for a minimum of 3 days. The active posting will continue to extend by 3 days until the position is filled.

Benefits, Rewards & Wellness

• Excellent Health, Dental & Vision Insurance
• Retirement 401(k) Savings Plan
• Generous paid time off policy including paid parental leave