Security Automation Engineer

About the role

We are looking for a skilled Security Automation Engineer to join our Security team and elevate our SOC capabilities. You will design and build automated playbooks, integrate security tools via APIs, and embed security policies into CI/CD pipelines, leveraging AI and Large Language Models.

Key responsibilities

• Build, test, and continuously tune automated playbooks in platforms such as Microsoft Sentinel, Palo Alto XSOAR, or Splunk Phantom.
• Design and implement scripts and connectors using REST APIs, webhooks, and JSON/YAML to link SIEMs, EDRs, and ticketing systems.
• Integrate security policies directly into CI/CD pipelines to maintain consistent security posture across environments.
• Automate threat triaging, data enrichment, and containment to reduce SOC analyst response times.
• Engineer intelligent playbooks that leverage Large Language Models for dynamic alert contextualization.

Required profile

• Advanced production‑ready proficiency in Python or PowerShell.
• Solid understanding of incident response life cycles, network/infrastructure engineering, and cloud security controls (AWS, Azure, or GCP).
• Strong ability to collaborate with developers, cloud architects, and SOC analysts to capture automation requirements.

Required skills

• Python
• PowerShell
• REST APIs
• JSON / YAML
• Microsoft Sentinel
• Palo Alto XSOAR
• Splunk Phantom
• AWS, Azure, GCP
• Terraform
• Ansible
• Jenkins or GitHub Actions
• Large Language Models (LLM) integration

What we offer

• Competitive remuneration and benefits package.
• Opportunities to work with international brands on complex multi‑technology projects.
• Friendly yet competitive work environment where success is celebrated.
• Flexible working hours and location.