Security Automation Engineer

About the role

The Security Automation Engineer will be responsible for designing and developing software/systems to support the Security tools used in the Information Security Department. The Security Automation Engineer will play a key role in designing, developing, and implementing threat detection and vulnerability management-related systems, processes and addressing automation needs. The Engineer will help to develop technical solutions to decrease response times by automating repeatable tasks.

Responsibilities

• Administers security-focused information systems, such as identity management, data loss prevention, SIEM, PKI, and eDiscovery/forensics.
• Identifies, assesses, and communicates risks relating to data, systems, and personnel and provides guidance on changes to reduce risk.
• Reviews violations of computer security procedures and provides guidance to end users to ensure violations are not repeated.
• Provides direction for automation Security strategy by working with management to ensure appropriate security coverage and mitigate risks.
• Participates in the evaluation and testing of security software and recommends automation strategy.
• Provides direction on best practices for automation and orchestration.
• Participates in forensic investigations and resolves automation problems as needed.
• Affects responses to Audit findings and helps provide automation solutions.
• Provides guidance and ensures alignment of software engineering best practices and principles within the group.
• Responsible for enforcing company policies and procedures.
• Performs other duties and/or projects as assigned.
• Provides after hours call assistance as needed.

Skills

• Experience with the use and architectural aspects of a SIEM.
• Working knowledge of Software Configuration Management (SCM) and the tools that support it.
• Understanding of networking technologies and protocols that make up an enterprise environment.
• Experience deploying and managing cloud-based infrastructure.
• In-depth understanding of software engineering principles.
• Ability to work independently and collaborate with a team.
• Able to work within established configuration and change management policies to ensure awareness, approval, and success of modifications to the environment.
• Excellent communication skills and ability to communicate effectively with technical and non-technical staff.
• Development experience with Python and PowerShell.
• Working knowledge of application development concepts, including REST APIs, Java, XML and SQL.
• Working knowledge of Sailpoint IdentityIQ or equivalent IAM platforms, including identity lifecycle management, access certifications, workflow configuration, application integration, automated provisioning, and related configuration or development concepts.
• Knowledge of enterprise authentication protocols and their related authorization methods.
• Familiar with the concepts of continuous integration and development (CICD) pipelines.
• Detail-oriented with strong analytical skills.
• Working knowledge of productivity, collaboration, cloud-based technologies, and automation platforms used to support workflow execution and process automation.
• Experienced user of Microsoft Office Suite and orchestration libraries.
• Experience in completing technical documentation.
• Technical aptitude for troubleshooting inefficiencies with operation/production activities.
• Familiar with Agile methodologies.
• Familiar with common computing platforms including Windows, Linux, and Mainframe.

Qualifications

• Bachelor's Degree and/or equivalent experience required.
• 5+ years of Information Technology experience required.
• 5+ years of experience developing scripts or automation required.
• 5+ years of Information Security specific experience or equivalent experience required.
• CISSP Certified Information Systems Security Professional or other equivalent certifications preferred.