Automation Engineer II, Falcon Complete

This is a fully remote position, open to applicants in United States.

📋 Description

• Create and sustain security automation workflows and SOAR playbooks for investigation, triage, and response.

• Write PowerShell and Python scripts for security enrichment, remediation, and basic forensic tasks.

• Embed SIEM queries into automated workflows to supply investigation context.

• Acquire knowledge and assist in the implementation of AI workflows.

• Utilize JSON parsing and Regular Expressions for the manipulation of security data.

• Collaborate with SOC analysts and engineering teams to pinpoint valuable automation opportunities.

• Collect feedback from Falcon Complete SOC analysts and identify automation prospects.

• Manage version control of automation scripts and workflows using Git platforms.

• Aid operational efficiency initiatives and contribute suggestions for enhancing analyst productivity.

• Keep abreast of SOAR, automation, and AI technologies and assess their relevance to MDR operations.

⛳️ Requirements

• Minimum of 2 years of experience in automation, scripting, or cybersecurity (related security experience will be considered).

• Strong proficiency in PowerShell for security investigation and response tasks.

• Familiarity with Python for automation and API integration.

• Basic knowledge of SIEM query languages and security analytics.

• Understanding of JSON and Regular Expressions for data parsing.

• Comprehension of incident detection and response workflows in SOC/MDR settings.

• Experience with Git, GitHub, GitLab, or Bitbucket.

• Demonstrated experience using AI technologies to improve decision-making, streamline workflows and processes, enhance efficiency, and drive business results.

• Excellent collaboration and communication abilities for working with SOC, engineering, and leadership teams.

• BA or BS / MA or MS degree in a relevant field, or equivalent work experience and/or training considered in lieu of a degree.

• Capability to periodically undergo and pass alcohol and/or drug tests during employment.

• Experience with the Falcon SOAR platform is a plus.

• Familiarity with LogScale is an advantage.

• Basic understanding of AI workflow frameworks and LLM integration.

• Knowledge of NIST and MITRE ATT&CK frameworks.

• Experience with cloud platforms such as AWS, Azure, or GCP.

• Prior experience in a SOC or security operations role.

• Experience with the CrowdStrike Falcon platform and its APIs.

• Knowledge of generative AI concepts and basic prompt engineering.

🏝️ Benefits

• Industry-leading compensation and equity awards.

• Comprehensive wellness programs for physical and mental health.

• Competitive vacation and holiday offerings for rest and rejuvenation.

• Paid parental and adoption leave.

• Opportunities for professional development for all employees, regardless of level or role.

• Employee Networks, neighborhood groups, and volunteer opportunities to foster connections.

• Dynamic office culture with top-tier amenities.

• Eligibility for bonuses.

• Equity grants.

• Health insurance coverage.

• 401k plan.

• Paid time off.