Security Detection & Automation Engineer - Product Security Section, Cyber Security Defense Department (CSDD)
Core
Build automated detection logic, security-as-code solutions, and response playbooks to protect private cloud environments and reduce time-to-detect/remediate.
Role type
Security Detection & Automation Engineer
Builds
production ML models | product features | dashboards & analysis | infrastructure
Domain
Cyber Security, Cloud Security, DevSecOps
Deliverable
infrastructure
Required skills
Security engineering, Detection engineering, Incident response, Container orchestration (Kubernetes), Cloud-native environments (AWS/GCP/Azure), Python/Go/Ruby, SIEM/EDR rule development, SOAR automation, Network protocols, OS internals (Linux/Windows), Web application architectures
Preferred skills
MITRE ATT&CK mapping, CI/CD tools (Jenkins/GitLab/GitHub Actions), Security-as-code, Identity-centric security, Micro-segmentation
Technologies
Kubernetes, AWS, GCP, Azure, Python, Go, Ruby, SIEM, EDR, SOAR, Jenkins, GitLab CI, GitHub Actions
Responsibilities
Develop and tune high-fidelity detection rules for SIEM/EDR/Cloud-Native tools; Design and implement automated workflows (SOAR) for threat response; Partner with SRE/DevOps to integrate security guardrails into CI/CD pipelines; Analyze logs and telemetry to identify sophisticated threats; Build automated systems for hybrid cloud configuration compliance and drift detection; Build custom internal tools/scripts to improve security stack visibility
Seniority
Mid-Senior, hands-on IC
