Sr. Cybersecurity Automation Engineer – Multiple Offices (Hybrid)

About the role

The Sr. Cybersecurity Automation Engineer is responsible for serving as the primary automation expert within the cybersecurity organization, partnering closely with the SOC, IAM, Cybersecurity Governance, Infrastructure Engineering, and IT Operations teams to design secure workflows, integrate platforms, document repeatable patterns, and continuously measure automation effectiveness.

Schedule

This is a hybrid position and can be resident in Phoenix, AZ; Atlanta, GA; Minneapolis, MN; Seattle, WA; Charlotte, NC; Miami or Orlando, FL; or Dallas, TX, with an onsite expectation of once per month.

Responsibilities

• Security automation and orchestration: Design, develop, and maintain SOAR playbooks and security workflows; Automate alert triage, enrichment, incident response, containment, and ticketing; Integrate SIEM, EDR, IAM, threat intelligence, GRC and ticketing platforms; Improve SOC efficiency through automation and orchestration.
• Identity and access automation: Automate joiner, mover, leaver processes; Automate provisioning, deprovisioning, access reviews, and privileged access workflows; Support service account, non-human identity, and AI agent lifecycle management; Integrate identity events into security monitoring and response processes.
• Governance, risk, and compliance automation: Automate evidence collection, control monitoring, and audit workflows; Support ISO 27001, NIST CSF, CIS Controls, SOC2 and ISO 42001 compliance initiatives; Develop dashboards, reporting, and compliance metrics; Streamline risk, policy, and governance processes through workflow automation.
• Cloud and infrastructure automation: Develop Infrastructure as Code (Terraform, Bicep, ARM, etc.); Integrate security controls into CI/CD pipelines; Automate cloud security posture management and remediation; Maintain secure baselines and configuration standards.
• AI-assisted security automation: Implement AI-assisted investigation, triage, and response workflows; Support Microsoft Security Copilot and related AI security technologies; Develop secure AI automation with appropriate guardrails and governance; Evaluate emerging AI security capabilities.
• Operational improvement and enablement