Senior Security Automation Engineer

What you'll do

• Design and maintain automation and orchestration systems including SOAR playbooks, custom services, and agentic AI workflows.
• Engineer and verify automated response actions for every new detection rule defined by the Detection Engineering team.
• Architect and build enterprise-grade APIs and connectors to provide machine-speed enrichment and correlation across the security stack.
• Own containment and remediation automation for incident response, specifically focusing on identity and access-related actions.
• Integrate automation with ecosystem tools such as identity providers, EDR platforms, and ticketing systems via REST APIs.
• Design and deploy agentic AI systems featuring multi-step autonomous workflows and context engineering.
• Triage production automation issues as an operational priority and track metrics for coverage, reliability, and time-to-remediate.
• Contribute to Detection-as-Code integration and document automation logic for team-wide ownership.

What we're looking for

• 7+ years of experience in security engineering, software engineering, or security automation.
• Proven experience designing, building, and operating enterprise-scale APIs, services, or orchestration systems.
• Hands-on experience building and maintaining SOAR playbooks (Splunk SOAR, Tines, XSOAR, etc.) using Python.
• Advanced proficiency in Python for production automation development.
• Demonstrated experience building or deploying agentic AI systems, including agent orchestration and context engineering.
• Practical understanding of incident response and security investigative workflows.
• Experience integrating systems with SIEM, identity/access systems, and ticketing systems via REST APIs.
• Experience running agentic AI systems in production with real autonomy (preferred).