Sr. Cybersecurity Automation Engineer – Multiple Offices (Hybrid)

The Sr. Cybersecurity Automation Engineer is responsible for serving as the primary automation expert within the cybersecurity organization, partnering closely with the SOC, IAM, Cybersecurity Governance, Infrastructure Engineering, and IT Operations teams to design secure workflows, integrate platforms, document repeatable patterns, and continuously measure automation effectiveness.

This is a hybrid position and can be resident in Phoenix, AZ; Atlanta, GA; Minneapolis, MN; Seattle, WA; Charlotte, NC; Miami or Orlando, FL; or Dallas, TX, with an onsite expectation of once per month.

Pursuant to Washington and Minneapolis regulations, the salary range is $153,600 to $169,000 annually and includes eligibility for performance-based bonuses. Factors which may affect starting pay within this range may include geography/market, skills, education, experience and other qualifications of the successful candidate. We offer generous compensation and benefits packages. For more information visit: https://www.littler.com/benefits/state-details.

Responsibilities

Security automation and orchestration

• Design, develop, and maintain SOAR playbooks and security workflows.
• Automate alert triage, enrichment, incident response, containment, and ticketing.
• Integrate SIEM, EDR, IAM, threat intelligence, GRC and ticketing platforms.
• Improve SOC efficiency through automation and orchestration.
  
  

Identity and access automation

• Automate joiner, mover, leaver processes.
• Automate provisioning, deprovisioning, access reviews, and privileged access workflows.
• Support service account, non-human identity, and AI agent lifecycle management.
• Integrate identity events into security monitoring and response processes.
  
  

Governance, risk, and compliance automation

• Automate evidence collection, control monitoring, and audit workflows.
• Support ISO 27001, NIST CSF, CIS Controls, SOC2 and ISO 42001 compliance initiatives.
• Develop dashboards, reporting, and compliance metrics.
• Streamline risk, policy, and governance processes through workflow automation.
  
  

Cloud and infrastructure automation

• Develop Infrastructure as Code (Terraform, Bicep, ARM, etc.).
• Integrate security controls into CI/CD pipelines.
• Automate cloud security posture management and remediation.
• Maintain secure baselines and configuration standards.
  
  

AI-assisted security automation

• Implement AI-assisted investigation, triage, and response workflows.
• Support Microsoft Security Copilot and related AI security technologies.
• Develop secure AI automation with appropriate guardrails and governance.
• Evaluate emerging AI security capabilities.
  
  

Operational improvement and enablement

• Monitor and maintain automation platforms and workflows.
• Measure automation effectiveness and operational value.
• Document solutions, processes, and architecture.
• Mentor cybersecurity team members on automation best practices.
  
  

Qualifications

TECHNICAL SKILLS AND COMPETENCIES REQUIRED:

• Identity and access management, privileged access, service account governance, and Zero Trust principles.
• Security monitoring, SIEM, detection engineering, incident response, and SOC operating models.
• Cloud security, infrastructure security, endpoint security, vulnerability management, and secure configuration baselines.
• Governance, risk, and compliance concepts, including ISO 27001, NIST CSF, CIS Controls, and ISO 42001.
• Secure software development lifecycle concepts, API security, logging, monitoring, and evidence collection practices.
  
  

Education And Certifications

Bachelor’s degree or equivalent relevant experience.

Experience Required

• Minimum 7 years in cybersecurity, security engineering, security operations, or infrastructure security.
• Minimum 4 years of hands-on security automation, SOAR, workflow engineering, or security platform integration experience.
• Hands-on experience designing and maintaining SOAR playbooks, automated triage workflows, enrichment processes, containment actions, and ticketing integrations.
• Strong scripting and automation experience, including Python, PowerShell, REST APIs, JSON, and automation frameworks.
• Experience integrating SIEM, EDR/XDR, IAM, threat intelligence, ServiceNow, and related cybersecurity platforms.
• Experience with Infrastructure as Code, CI/CD security automation, Microsoft Azure, and cloud security technologies.
• Ability to operate as a senior individual contributor who can build solutions, document patterns, mentor others, and advise technical and operational stakeholders.
  
  

Preferred Experience

• Experience with Microsoft Sentinel, Defender, Entra ID, Omada, ServiceNow, OneTrust, and Microsoft Security Copilot.
• Experience implementing AI-assisted investigation, triage, response, governance, or compliance automation.
• Experience building dashboards, metrics, and reporting for operational performance, audit readiness, and executive visibility.
• Experience supporting non-human identity, service account, and AI agent lifecycle management.
• Experience mentoring cybersecurity team members on automation design, secure coding, platform integrations, and operational best practices.
  
  

About Littler

Littler is the largest globalemployment and labor law practice in the world exclusively devoted torepresenting management. With more than 1,900 attorneys in over 100 officesworldwide, Littler serves as the single source solution provider to the globalemployer community. Consistently recognized in the industry as a leading andinnovative law practice, Littler has been litigating, mediating and negotiatingsome of the most influential employment law cases and labor contracts on recordfor over 75 years.

Littler’s unparalleledcommitment to labor and employment law helps clients navigate a complexbusiness world with nuanced legal issues—building better solutions for clients’toughest challenges. With deep experience and resources that are local, everywhere,Littler is fully focused on its clients. With a diverse team of the brightestminds, Littler fosters a culture that celebrates original thinking. And withpowerful proprietary technology, Littler disrupts the status quo—deliveringbold, groundbreaking innovation that prepares employers not just for what’shappening today, but for what’s likely to happen tomorrow.

Benefits

We offer agenerous benefits package to full-time and part-time employees working at least a 50% schedule. Benefitsinclude comprehensive health, dental and vision plan for you, your spouse/domestic partner andchildren. In addition, we provide a superior 401(k) plan, ample time offprograms, mental health programs, family building and caregiving, generous paidparental leave, life insurance, disability insurance, a wellness program,flexible spending accounts, and an employee referral bonus program.

For moreinformation about our benefits visit: www.littler.com/benefits/state-details.

For moreinformation about our firm visit: www.littler.com.

Norecruiters – principals only. Littler is not accepting unsolicitedresumes from search firms for this position. Search firms who submit candidatesfor this position are not eligible for any form of compensation, even if thecandidate is successfully hired.

Please note applications are only accepted through our careers page www.littler.com/careers. For inquiries regarding this opportunity, please e-mail Jazmin Vivanco at jvivanco@littler.com with the job title in the subject line

This job posting is a general description of thetypes of responsibilities that are required of an individual in this job. It is not intended to be a complete list of the responsibilities, duties andskills that may be required for this job.

#BeYOUatLittler