{bc}
oracle

Information Security Engineer - DevSecOps

Williams-Sonoma
Rocklin, USA
Full-time
Mid
Onsite
Discovered 1 weeks ago

Full Job Posting

Responsibilities

  • Design, develop, test, deploy, and maintain SOAR playbooks and response workflows in Google SecOps SOAR and Palo Alto Cortex XSOAR.
  • Build custom security applications, reusable services, scripts, and workflow automations that improve investigation, enrichment, triage, and response processes.
  • Develop and maintain secure integrations using REST APIs, JSON, webhooks, and platform SDKs across Google SecOps SIEM, CrowdStrike, Tanium, Ping Identity, Delinea, MISP, and other enterprise systems.
  • Own the full software development lifecycle, including requirements analysis, solution design, source control, testing, release management, documentation, and ongoing production maintenance.
  • Apply Python and PowerShell to automate repeatable security operations tasks; use Git and CI/CD practices to manage versioning, code review, and controlled releases.
  • Use Docker and container-based development practices, and Terraform or other infrastructure-as-code approaches where appropriate for repeatable deployments.
  • Partner with SOC, Incident Response, Threat Intelligence, Security Engineering, IAM, and Infrastructure teams to identify automation opportunities and translate operational needs into technical requirements.
  • Troubleshoot failed playbooks, API integrations, custom applications, and production workflows; conduct root-cause analysis and implement durable fixes.
  • Build appropriate safeguards into automations, including least-privilege access, credential protection, audit logging, error handling, testing, approval gates, and rollback procedures for disruptive actions.
  • Participate in an on-call rotation supporting production SOAR automations, integrations, and custom security applications.
  • Evaluate AI-assisted development and agentic automation opportunities, applying human review, security controls, and validation before production adoption.
  • Maintain clear technical documentation, runbooks, and knowledge transfer materials to support reliable operations and cross-team collaboration.
  • Criteria
  • 3+ years of experience in information security engineering, software development, DevSecOps, security automation, or a related technical discipline.
  • Bachelor's degree in Computer Science or related field, or equivalent work experience.
  • Hands-on software development and scripting experience using Python and PowerShell, with working knowledge of REST APIs and JSON.
  • Experience building, testing, and maintaining automation workflows, platform integrations, or custom applications in production environments.
  • Working knowledge of SIEM, SOAR, endpoint security, identity, and threat intelligence concepts and operational workflows.
  • Experience with Git-based source control, CI/CD practices, software testing, and secure development principles.
  • Familiarity with Docker or containers and infrastructure-as-code tools such as Terraform.
  • Strong analytical, troubleshooting, documentation, and communication skills; ability to work effectively across security and infrastructure teams.
  • Willingness to participate in an on-call rotation for supported production services.
  • Experience developing playbooks and integrations in Google SecOps SOAR or Palo Alto Cortex XSOAR preferred.
  • Hands-on experience integrating Google SecOps SIEM, CrowdStrike, Tanium, Ping Identity, Delinea, or MISP preferred.
  • Experience designing reusable automation frameworks, custom APIs, or internal security applications preferred.
  • Familiarity with incident response processes, detection engineering, and threat intelligence enrichment workflows preferred.
  • Experience with AI-assisted software development or agentic AI workflows, including appropriate testing, oversight, and security controls preferred.
  • Experience supporting hybrid on-premises and cloud infrastructure in a large enterprise environment preferred.
  • This role requires being onsite in the Rocklin, CA office Monday through Thursday.
  • Our Culture & Values
  • We believe that taking care of our people is vital to our success and we strive to offer equitable and transparent practices for all. We prioritize connection, growth, and wellbeing.
  • People First
  • Putting People First means investing in overall well-being and opportunities to grow and advance within the organization. Depending on the position and location, here are a few highlights of what benefits may be available

Qualifications

  • Bachelor's degree in Computer Science or related field, or equivalent work experience.
  • Experience with Git-based source control, CI/CD practices, software testing, and secure development principles.
  • Familiarity with Docker or containers and infrastructure-as-code tools such as Terraform.

Preferred Qualifications

  • Familiarity with incident response processes, detection engineering, and threat intelligence enrichment workflows preferred.
  • Experience with AI-assisted software development or agentic AI workflows, including appropriate testing, oversight, and security controls preferred.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Williams-Sonoma