Automation Engineer - Cyber Security Operations

Duties

• Identifies, defines, configures, executes and maintains automation scripts and tools in support of the brand’s information security initiatives.
• Experience with common scripting languages such as Python, PowerShell, Bash, etc.
• Familiarity with Security Orchestration Automation and Response Tools such as MSFT Sentinel, Entra ID, Defender, etc.
• Experience writing information security playbooks is ideal.
• Major role in cyber threat hunt automation efforts, including vetting of new models and procedures to identify and react to anomalous network and/or endpoint behaviors.
• Regular collaboration with multiple teams such as Endpoint Security and Threat & Vulnerability Management as well as Security Operations peers is critical to success.

Responsibilities

• Creates automation playbooks in coordination with organization peers to reduce the number of tedious/manual tasks (freeing up time for other information security tasks).
• Administration, configuration, maintenance, and support of the MSFT Sentinel environment.
• Creation, evaluation, updating, and maintenance of Information Security Incident Management Playbooks.
• Participation in security incident response efforts by, among other things, having an in-depth knowledge of common security exploits, vulnerabilities and countermeasures.
• Investigation of Cyber Security threats.
• Identification, creation, and maintenance of opportunities for threat intelligence automation.

Pay

$74,000.00 - $126,000.00 Annually