Note: The job is a remote job and is open to candidates in USA. Foresite Cybersecurity is a mission-driven partner helping organizations navigate complex threats, and they are seeking a highly motivated Security Automation Engineer to join their team. In this role, you will support and enhance Foresite's proprietary security products by developing automation solutions and providing technical support to the internal Security Operations Center (SOC).
Responsibilities
- Write, optimize, and maintain robust Python scripts to build custom RESTful API integrations, automate repetitive workflows, and orchestrate security tool actions
- Design and maintain databases (SQL/NoSQL) to store, retrieve, and transition threat intelligence and alert data seamlessly within automated security workflows
- Leverage Git and GitHub best practices to manage code repositories, review team playbooks, and maintain structured version control for all scripts and configurations
- Design, build, and troubleshoot automation playbooks within Google SecOps SOAR to support Foresite's proprietary tools and streamline analyst workflows
- Serve as the primary technical resource for our SOC analysts. Troubleshoot playbook failures, optimize ingestion pipelines, and act as a reliable partner in resolving engineering issues
- Collaborate with internal security engineering leadership to analyze bottleneck processes and implement automated solutions that dramatically decrease mean-time-to-detection (MTTD) and response (MTTR)
- Create and maintain comprehensive internal documentation for custom integrations, database schemas, and playbook logic to support team cross-training and ongoing maintenance
Skills
- 3-5 years of experience in security engineering or security operations
- Strong background in Python development
- Highly proficient in working with RESTful APIs
- Experience parsing complex JSON structures
- Experience securely transmitting data across diverse platforms
- Demonstrated experience with GitHub (branching, merging, pull requests)
- Experience working directly with SQL or NoSQL databases
- Strong interpersonal and communication skills
- Ability to work closely with SOC analysts
- Ability to understand operational needs and translate them into technical requirements
- Natural self-starter with excellent analytical skills
- Meticulous attention to detail
- Ability to debug complex code and find elegant solutions to automation challenges
- Experience with Google SecOps SOAR (formerly Siemplify) or other major SOAR platforms
- Active eagerness and aptitude to learn and master SOAR quickly
Benefits
- Comprehensive Health & Wellness: Robust medical insurance options to keep you and your family healthy.
- Employer-Covered Insurance: We fully provide employer paid Dental coverage, as well as Short-Term (STD) and Long-Term Disability (LTD) to ensure you are protected financially if life takes an unexpected turn.
- Generous Time Off: We believe in a true work-life balance. You’ll start with 3 weeks of paid vacation, plus additional sick leave and paid company holidays to ensure you have time to recharge.
- Growth & Mentorship: Access to world-class training and mentorship. We support your career trajectory, whether you’re looking to deepen your technical skills or move into leadership.
Company Overview
Company H1B Sponsorship