Description

Key Responsibilities

 

• Plan, design, develop, deploy, administer, and support enterprise security automations and custom security tools.
• Develop Python-based automations, internal web applications, APIs, SDKs, scripts, dashboards, command-line utilities, and system integrations.
• Build automated workflows for alert enrichment, triage, incident response, case management, notifications, containment, escalation, and reporting.
• Develop tools supporting CVE analysis, vulnerability enrichment, prioritization, tracking, and security decision support.
• Support security platforms including IAM, DSPM, ASM, vulnerability management, email security, endpoint security, SIEM, XDR, SOAR, logging, monitoring, network security, cloud security, and threat intelligence.
• Integrate security technologies with ticketing, case management, notification, identity, data sources, APIs, SDKs, and other enterprise systems.
• Support IAM functions including provisioning, deprovisioning, access reviews, RBAC, service accounts, API credentials, authentication, and authorization.
• Deploy, configure, patch, monitor, optimize, and troubleshoot Linux systems supporting security sensors, collectors, applications, containers, and data-processing services.
• Support Docker-based environments.
• Provide technical troubleshooting, automation development, system integration, escalation support, knowledge transfer, and operational handoffs.
• Monitor automation health, application availability, system performance, sensor status, integration failures, API errors, and security operational metrics.
• Ensure high availability, resilience, backup, recovery, patching, lifecycle management, secure configuration, and controlled change processes.
• Collaborate with security and business stakeholders to align solutions with organizational goals, regulatory requirements, security frameworks, and risk tolerance
• Preferred Skills
  
  Additional Technical Skills Education
  
  Preferred Certifications Work Arrangement
  
   
• Experience serving as a Security Engineering Generalist in a large, multi-tenant, shared-services, or managed-services environment
• Hands-on experience with Linux, Docker, security sensors, monitoring, scripting, and security platform administration
• Experience supporting SOC analysts, security engineers, incident responders, and enterprise customers
• Experience developing:
  • Playbooks
  • Runbooks
  • Procedures
  • Technical documentation
• Familiarity with enterprise security technologies such as:
  • Palo Alto Networks
  • Proofpoint
  • Tenable
  • Cribl
  • WhatsUp Gold
• Experience supporting IAM, DSPM, ASM, vulnerability management, email security, endpoint security, SIEM, SOAR, logging, monitoring, cloud security, and related technologies
• Strong understanding of:
  • Enterprise security architecture
  • Incident response
  • Networking
  • Access control
  • Secure software development
  • Systems administration
  • Cybersecurity frameworks
  • Experience integrating enterprise technologies using APIs, SDKs, web services, structured data formats, authentication methods, and vendor-supported interfaces
  • Experience developing or supporting internal web applications, APIs, dashboards, databases, command-line tools, and related software components
  • Advanced Python development experience
  • Familiarity with full-stack development, source control, testing, and software deployment practices
  • Bachelor's degree in Information Technology, Computer Science, Software Engineering, Information Security, or a related field
  • 8 years of relevant work experience may be substituted for education
  • Minimum 5 years of experience supporting large IT environments, security systems, software development, and/or system deployments
  • CISSP
  • Security+
  • GIAC
  • Other relevant cybersecurity certifications
  • Linux certifications
  • Python certifications
  • Cloud certifications
  • IAM certifications
  • Other relevant security engineering or platform certifications

Key Skills

Education

Bachelor's degree