CSOC Engineer - Security Automation
Core
Design, operate, and evolve the internal security platform and tools (SIEM/SOAR) to enable Security Analysts to keep customers safe.
Role type
Security Automation Engineer (IC)
Builds
Internal security platform, automated security workflows, and API integrations for detection and response.
Domain
Cybersecurity / Cloud Infrastructure
Deliverable
production ML models | product features | infrastructure
Required skills
Python, JavaScript, Golang, Docker, Kubernetes, GCP, Terraform, FastAPI, React, Prometheus, Grafana, CI/CD, API integration, system design, code quality, testing
Preferred skills
SIEM/SOAR platform experience, event-driven architectures, message queues (Kafka, Pub/Sub), CDN/cloud provider experience, geographically dispersed team collaboration
Technologies
FastAPI, React, GCP, Kubernetes, Terraform, Prometheus, Grafana, Docker
Responsibilities
Design, develop, and refactor custom internal security platform backend and frontend; Partner with security analysts to automate manual workflows; Work with infrastructure in GCP using Kubernetes and Terraform; Build and maintain API integrations connecting detection tools and ticketing systems; Champion code quality through reviews, testing, and CI/CD pipelines.
Seniority
Mid-level, hands-on IC