W2 only - Senior Security Engineer

Job Title: Senior Security Automation Engineer

Location: Remote (EST timings)

Position Type: Contract position

Responsibilities:

Manager Notes:

• Experience developing security automation within Microsoft Azure, including Azure services and Microsoft Entra ID (Azure AD).
• Experience integrating automation with ServiceNow (SNOW) or other enterprise ITSM/workflow platforms.
• Experience automating security workflows across Microsoft security technologies, cloud platforms, and enterprise identity environments.

Position Overview:

• We are seeking a Senior Security Automation Engineer to design, build, and scale production-grade automation across enterprise cybersecurity environments. This is a hands-on engineering role focused on reducing manual security operations, suppressing alert and ticket noise, and enabling faster, safer cyber defense outcomes.
• The ideal candidate combines strong security engineering knowledge with software development and automation expertise. This individual will build API-driven integrations and automated workflows across security platforms while ensuring that all automation is safe, observable, auditable, and scalable.

Required Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related technical field.
• 6 years of experience in security engineering, security automation, or a closely related technical field.
• Strong hands-on experience building production-grade automation systems.
• Proficiency in Python, PowerShell, or a similar programming/scripting language.
• Experience building integrations using APIs and services.
• Strong understanding of security operations workflows, including alert enrichment, suppression, containment, remediation, and response.
• Experience working with distributed systems and enterprise technology environments.
• Ability to design automation that is safe, explainable, observable, and auditable.

Preferred Qualifications:

• Experience integrating automation across IAM, endpoint, cloud, network, or data security platforms.
• Experience with SOAR, ITSM, ticketing, workflow, or orchestration platforms.
• Experience designing rollback, TTL/time-limited actions, dry-run capabilities, and staged enforcement models.
• Exposure to AI-assisted workflows where automation consumes AI or model-generated decision outputs.
• Experience developing dashboards, reporting, or metrics to measure automation outcomes.
• Experience creating reusable automation frameworks or connectors used across multiple teams.

Key Responsibilities:

• Design and build production-grade security automation workflows across identity, endpoint, cloud, network, and data security environments.
• Develop API-driven integrations between security tools, enterprise platforms, and workflow systems.
• Automate security processes including alert enrichment, suppression, containment, remediation, and response.
• Build automation that reduces repetitive analyst work and operational noise.
• Integrate security automation with ITSM, ticketing, orchestration, and enterprise workflow platforms where approvals or human intervention are required.
• Implement safety controls including kill switches, dry-run/test modes, time-limited actions, rollback capabilities, and staged deployments across development, testing, and production environments.
• Ensure automation is fully observable and auditable through comprehensive logging, correlation identifiers, and action tracking.
• Develop reusable automation frameworks, connectors, and patterns that can scale across multiple security teams and domains.
• Partner with security engineers, platform engineers, data scientists, and other technical stakeholders to deliver integrated solutions.
• Mentor junior engineers and promote security automation engineering best practices.

Ideal Candidate Profile:

• The strongest candidate will be a hands-on engineer who sits at the intersection of cybersecurity and software/automation engineering. This is not a traditional GRC, security analyst, or purely AI/ML-focused position. We are looking for someone who has personally built automation that integrates security tools and safely executes or orchestrates actions through APIs.
• Success in this role will include delivering production-ready automation that measurably reduces analyst workload, suppresses operational noise, and creates reusable automation capabilities that can be adopted across multiple security domains.