Security Automation Engineer [L5]
Core
Design and develop security-event normalization, enrichment, triage, and response workflows using SOAR and LLM-based logic for the AI-SOC framework.
Role type
Senior IC Security Automation Engineer
Builds
Automated security response workflows, integrations with SIEM/EDR/CTI platforms, and AI-SOC orchestration logic
Domain
Cybersecurity / Security Operations / Cloud Infrastructure
Deliverable
production ML models | product features
Required skills
Python, modular design, RESTful APIs, Webhooks, JSON processing, CI/CD, Git, cloud systems (AWS), incident diagnosis, SOAR platform operation, SIEM/EDR/CTI integration
Preferred skills
LLM-powered security automation, LangChain, LlamaIndex, Kubernetes, EKS, log-processing pipelines, message queues, security dashboards
Technologies
Python, AWS, SOAR, SIEM, EDR, CTI, RESTful APIs, Webhooks, JSON, Git, CI/CD, Kubernetes, EKS, LangChain, LlamaIndex
Responsibilities
Design and operate SOAR workflows; build integrations with SIEM, EDR, CTI, ticketing, and SaaS platforms; develop LLM-based triage and automated response orchestration; optimize automation workflows for performance and scalability; manage incidents affecting automation systems
Seniority
Senior, hands-on IC
