Security Operations Engineer I

Key Responsibilities

• Develop, deploy, and maintain robust automation scripts utilizing Python, Bash, and PowerShell to support security infrastructure and compliance workflows.
• Architect integrations between security tools and enterprise applications via REST APIs (GET/POST, OAuth, JSON parsing) to optimize data exchange.
• Design and maintain reusable, automated processes for vulnerability management, patch management, and continuous compliance reporting.
• Manage and maintain version-controlled codebases utilizing Git and established DevOps methodologies.
• Drive the automation of continuous compliance monitoring and evidence gathering for critical frameworks, specifically NIST 800-171 and CMMC.
• Automate security monitoring, anomaly detection, and rapid response workflows for endpoint activity and network vulnerabilities.
• Execute proof-of-concept testing and validation for new security automation methodologies and tooling.
• Maintain rigorous, accurate documentation for all engineered scripts, API integrations, and automation workflows.

Qualifications

• BS or MS degree in Computer Science, Cybersecurity, Data Science, or a related technical discipline.
• Demonstrated proficiency in programming and scripting languages (Python, Bash, PowerShell).
• Experience with containerization (e.g. Docker, Kubernetes).
• Deep understanding of REST API integration, authentication mechanisms, and data parsing.
• Strong foundation in system design, data aggregation, and creating visualization dashboards.
• Experience managing code utilizing version control systems (Git).
• Exceptional analytical problem-solving skills with a strict focus on operational efficiency.
• Ability to communicate complex technical architectures clearly within a collaborative environment.

Desired

• Direct experience automating compliance evidence for NIST 800-171, CMMC, SOC 2, or ISO 27001.
• Experience applying data science, data modeling, or anomaly detection within a cybersecurity context.
• Hands-on experience with SIEMs, vulnerability scanners, and endpoint detection and response (EDR) platforms.
• Exposure to cloud security automation (AWS Lambda, Azure Functions) and configuration management (Ansible, Terraform).
• Professional certifications such as CompTIA Security+, Network+, or similar credentials.
• Proficiency in AI tooling.

Benefits

Firefly offers outstanding benefits for our employees, including generous health, dental and vision plans with low plan deductibles, parental leave, educational reimbursement, short term disability, and flexible PTO options.