Senior Cyber Security Automation Engineer

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Collaborate with SOC, Insider Risk, DLP, Red Team, Threat Intelligence, and other security teams to design, implement, and sustain effective, reusable, and dependable security automations.

• Oversee the entire lifecycle of an automation playbook, from gathering requirements and planning to design, testing, implementation, and upkeep.

• Spearhead initiatives to proactively discover security automation prospects, secure approval from internal stakeholders, deploy solutions, and assess the efficiencies achieved.

• Utilize Large Language Models (Open AI, Hugging Face, etc.) to pinpoint use cases that can significantly enhance security analysts' capacity to address incidents and automate actions wherever feasible.

• Collaborate with the detection team to develop comprehensive solutions that incorporate automated feedback loops, enhancing detection tuning to enrich data and support intricate detections.

• Broaden the team’s automation capabilities to support all areas within security.

• Conduct quality assessments on automations to minimize errors and promote ongoing improvement.

• Serve as an advocate for standardization where applicable.

⛳️ Requirements

• Master's or Bachelor's degree in Information & Computer Science, Statistics, or a quantitative science discipline.

• Proven experience in crafting automation solutions for Cyber Security.

• 5+ years of experience in Information Technology.

• 4+ years of experience in Cyber Security.

• 2+ years of experience with any SOAR tool (e.g., Splunk SOAR, Sentinel, Swimlane, etc.).

• 4+ years of experience in development using Python.

• Strong proficiency in Python.

• Familiarity with scripting languages such as Bash and PowerShell.

• Experience with REST and other third-party API integrations.

• Proven experience in developing solutions using OpenAI or other LLMs.

• Understanding of software development best practices, including coding standards, code reviews, and testing methodologies.

• Solid grasp of IT security concepts and practices, with demonstrable experience in automating Information Security practices and workflows.

• Proficient in using GitHub for version control, collaboration, and code repository management.

• Familiarity with continuous integration and continuous deployment (CI/CD) practices to optimize software development and deployment processes.

• Experience with CI/CD tools (such as GitHub Actions) for automating build, test, and deployment processes, ensuring smooth and efficient software delivery.

• Familiarity with infrastructure-as-code (IaC) tools (e.g., Terraform, CloudFormation) to automate infrastructure provisioning and maintain consistent environments throughout the development lifecycle.

• Strong verbal and concise written communication skills.

• Excellent organizational, multi-tasking, and time management capabilities.

• Prefers working in an agile team environment.

🏝️ Benefits

• 401(k) plan with company matching contributions.

• Comprehensive Medical, Dental & Vision Care.

• Paid parental leave at 100% of salary.

• Paid Time Off and Company Holidays.

• Early access to earned wages through Daily Pay.