Senior Security Engineer

Security Automation Development

Security Platform Integration

AI and LLM-Powered Security Automation

Production Engineering and Content Management

Cross-Functional Collaboration

Must-Have Skills

Good-to-Have Skills

Required Qualifications and Experience

Qualifications

• Key Responsibilities
• Security Automation Development
• Design, develop, and maintain reusable security automation components, connectors, integrations, and playbooks.
• Build scalable automation solutions to streamline SOC workflows, incident response, threat investigation, and other security operations.
• Translate customer requirements, real-world use cases, and proof-of-concepts into production-ready security automation content.
• Develop modular, reliable, and maintainable automation frameworks that can be deployed across diverse customer environments.
• Optimise automation workflows for performance, scalability, reliability, and ease of deployment.
• Security Platform Integration
• Build integrations with SIEM, SOAR, Endpoint Detection and Response (EDR), vulnerability management, and threat intelligence platforms.
• Develop connectors that enable seamless communication and data exchange between security tools.
• Automate repetitive security tasks, alert enrichment, incident triage, investigation, and response workflows.
• Ensure integrations are robust, efficient, and compatible with different security environments.
• Troubleshoot integration issues and continuously improve the reliability of automation components.
• AI and LLM-Powered Security Automation
• Integrate AI and LLM capabilities into security automation workflows to support intelligent analysis and decision-making.
• Explore agentic workflows, AI-powered investigation, and automated response capabilities for security operations.
• Develop automation frameworks that combine traditional rule-based workflows with AI-driven reasoning where appropriate.
• Evaluate AI-enabled approaches for improving alert analysis, threat investigation, and operational efficiency.
• Apply suitable validation and safeguards to ensure AI-powered workflows are reliable and secure.
• Production Engineering and Content Management
• Maintain and continuously enhance the security automation content library used by customers globally.
• Apply software engineering best practices, including code reviews, testing, documentation, version control, and performance optimisation.
• Ensure automation components are reusable, scalable, maintainable, and production-ready.
• Identify opportunities to improve deployment speed, operational consistency, and the overall usability of security solutions.
• Diagnose technical issues and implement long-term solutions to prevent recurring problems.
• Cross-Functional Collaboration
• Collaborate with Sales Engineering, Professional Services, and Product teams to understand customer requirements and improve solution delivery.
• Support technical proof-of-concepts and help convert customer-specific requirements into reusable automation capabilities.
• Work with stakeholders to troubleshoot deployment challenges and enhance the customer experience.
• Incorporate customer feedback into automation development and product improvements.
• Contribute technical insights and recommendations to strengthen security automation capabilities.
• Must-Have Skills
• Python Programming: Strong programming skills in Python for developing automation components, integrations, and security workflows.
• SOAR: Practical understanding of Security Orchestration, Automation, and Response platforms, including the development and implementation of automation workflows.
• Playbook Development: Experience designing and building security playbooks for incident response, investigation, alert triage, and operational automation.
• Cybersecurity Fundamentals: Understanding of security operations, threat detection, incident response, and security tooling.
• Problem-Solving: Strong analytical skills and the ability to design efficient, scalable solutions for complex security challenges.
• Software Engineering: Understanding of algorithms, data structures, testing, maintainable code, and performance optimisation.
• Good-to-Have Skills
• SIEM: Experience with Security Information and Event Management platforms, security event analysis, alert management, and detection workflows.
• Experience integrating EDR, vulnerability management, and threat intelligence platforms.
• Familiarity with SOC operations, incident response, and threat engineering.
• Knowledge of JavaScript for automation and integration development.
• Understanding of Generative AI, LLMs, agentic workflows, and AI-powered automation frameworks.
• Experience developing reusable security content for multiple customer environments.
• Familiarity with REST APIs, webhooks, authentication mechanisms, and third-party integrations.
• Required Qualifications and Experience
• Demonstrated experience in security engineering, security automation, cybersecurity software development, or a related technical field.
• Strong hands-on programming experience in Python or JavaScript.
• Experience developing security automation solutions, integrations, or SOC playbooks.
• Practical understanding of security platforms such as SIEM, SOAR, EDR, vulnerability management, and threat intelligence tools.
• Ability to transform customer requirements and technical concepts into production-grade automation solutions.
• Understanding of AI/LLM concepts and their application to security workflows.
• Strong ownership, troubleshooting, and collaboration skills.
• Ability to work effectively in a fast-paced, product-focused engineering environment.

Responsibilities

• Design, develop, and maintain reusable security automation components, connectors, integrations, and playbooks.
• Build scalable automation solutions to streamline SOC workflows, incident response, threat investigation, and other security operations.
• Translate customer requirements, real-world use cases, and proof-of-concepts into production-ready security automation content.
• Develop modular, reliable, and maintainable automation frameworks that can be deployed across diverse customer environments.
• Optimise automation workflows for performance, scalability, reliability, and ease of deployment.
• Build integrations with SIEM, SOAR, Endpoint Detection and Response (EDR), vulnerability management, and threat intelligence platforms.
• Develop connectors that enable seamless communication and data exchange between security tools.
• Automate repetitive security tasks, alert enrichment, incident triage, investigation, and response workflows.
• Ensure integrations are robust, efficient, and compatible with different security environments.
• Troubleshoot integration issues and continuously improve the reliability of automation components.
• Integrate AI and LLM capabilities into security automation workflows to support intelligent analysis and decision-making.
• Explore agentic workflows, AI-powered investigation, and automated response capabilities for security operations.
• Develop automation frameworks that combine traditional rule-based workflows with AI-driven reasoning where appropriate.
• Evaluate AI-enabled approaches for improving alert analysis, threat investigation, and operational efficiency.
• Apply suitable validation and safeguards to ensure AI-powered workflows are reliable and secure.
• Maintain and continuously enhance the security automation content library used by customers globally.
• Apply software engineering best practices, including code reviews, testing, documentation, version control, and performance optimisation.
• Ensure automation components are reusable, scalable, maintainable, and production-ready.
• Identify opportunities to improve deployment speed, operational consistency, and the overall usability of security solutions.
• Diagnose technical issues and implement long-term solutions to prevent recurring problems.
• Collaborate with Sales Engineering, Professional Services, and Product teams to understand customer requirements and improve solution delivery.
• Support technical proof-of-concepts and help convert customer-specific requirements into reusable automation capabilities.
• Work with stakeholders to troubleshoot deployment challenges and enhance the customer experience.
• Incorporate customer feedback into automation development and product improvements.
• Contribute technical insights and recommendations to strengthen security automation capabilities.
• Python Programming: Strong programming skills in Python for developing automation components, integrations, and security workflows.
• SOAR: Practical understanding of Security Orchestration, Automation, and Response platforms, including the development and implementation of automation workflows.
• Playbook Development: Experience designing and building security playbooks for incident response, investigation, alert triage, and operational automation.
• Cybersecurity Fundamentals: Understanding of security operations, threat detection, incident response, and security tooling.
• Problem-Solving: Strong analytical skills and the ability to design efficient, scalable solutions for complex security challenges.
• Software Engineering: Understanding of algorithms, data structures, testing, maintainable code, and performance optimisation.
• SIEM: Experience with Security Information and Event Management platforms, security event analysis, alert management, and detection workflows.
• Experience integrating EDR, vulnerability management, and threat intelligence platforms.
• Familiarity with SOC operations, incident response, and threat engineering.
• Knowledge of JavaScript for automation and integration development.
• Understanding of Generative AI, LLMs, agentic workflows, and AI-powered automation frameworks.
• Experience developing reusable security content for multiple customer environments.
• Familiarity with REST APIs, webhooks, authentication mechanisms, and third-party integrations.
• Demonstrated experience in security engineering, security automation, cybersecurity software development, or a related technical field.
• Strong hands-on programming experience in Python or JavaScript.
• Experience developing security automation solutions, integrations, or SOC playbooks.
• Practical understanding of security platforms such as SIEM, SOAR, EDR, vulnerability management, and threat intelligence tools.
• Ability to transform customer requirements and technical concepts into production-grade automation solutions.
• Understanding of AI/LLM concepts and their application to security workflows.
• Strong ownership, troubleshooting, and collaboration skills.
• Ability to work effectively in a fast-paced, product-focused engineering environment.