Security Automation and Orchestration Engineer

About the role

We are seeking a Security Automation and Orchestration Engineer with deep expertise in cybersecurity automation, or relevant technical automation experience with the ability to adapt to cybersecurity tooling. This role is pivotal in scaling our security operations, enhancing threat response, and ensuring compliance through intelligent automation across our digital infrastructure. This position is an onsite position and available to be filled at any Huntington Corporate office location (see location options on posting).

Responsibilities

• Design and implement automation for security operations (SecOps), including threat detection, incident response, and vulnerability management
• Develop and maintain playbooks for SOAR (Security Orchestration, Automation, and Response) platforms such as Splunk SOAR, Palo Alto XSOAR, or Microsoft Sentinel
• Design, develop, and maintain scalable automation frameworks for Cybersecurity operations
• Automate compliance checks and reporting for frameworks like NIST, ISO 27001, and CIS Controls
• Integrate security tools (SIEM, EDR, firewalls, IAM) into automated workflows
• Collaborate with cybersecurity, DevOps, and infrastructure teams to embed security into CI/CD pipelines
• Lead initiatives to reduce manual effort in security monitoring, alert triage, and remediation
• Engage in automation strategy and mentor junior engineers
• Participation in rotating on-call schedule

Requirements

• 5+ years of production support and IT automation
• 5+ years of operational experience with security technologies, or relevant technical automation environments
• 5+ years of implementing or utilizing technology lifecycles and best practices
• Bachelor's Degree or 4+ additional years of equivalent experience

Qualifications

• Expert level knowledge of core networking protocols including BGP, DNS, HTTP/S, DNS, etc
• Expert level knowledge of operating systems, e.g. Windows, Linux, & Unix
• Expert level network troubleshooting skills utilizing packet capture/analysis packages such as Wireshark, TCPdump, etc
• Excellent customer facing communication skills (both written and verbal)
• Ability to research, evaluate, and devise course of action for security hardware/software and tools to make overall impact on the enterprise’s existing security environment
• Strong scripting skills (Python, PowerShell, Bash) for security automation
• Deep understanding of cybersecurity principles, threat landscapes, and incident response
• Familiarity with cloud security automation (AWS, Azure, GCP)
• Proven