Note: The job is a remote job and is open to candidates in USA. Pacer Group is seeking an experienced and highly technical Automation Security Engineer to join their team in a fully remote capacity. This role focuses on designing, building, and maintaining automation and orchestration solutions to improve security outcomes and accelerate response times.
Responsibilities
- Design and Deploy SOAR Playbooks: Build, test, and optimize playbooks for automated alert triage, context enrichment, threat containment, and rapid remediation
- Integrate Security Tooling: Build and manage seamless, event-driven API integrations across a diverse security stack, including SIEM, EDR/XDR, IAM, vulnerability management, and ticketing systems
- Develop Reusable Code Assets: Write clean, modular, and reusable automation scripts and libraries in Python (with robust error handling, retries, logging, and observability) adhering to secure coding practices
- Collaborate with Incident Response & SOC: Translate manual analytical procedures into reliable automated runbooks, incorporating manual approval gates and role-based access control (RBAC) where necessary
- Implement Security-as-Code: Partner with Infrastructure and Cloud Engineering teams to automate security controls, compliance checks, hardening steps, and configuration drift remediation
- Uphold Auditability and Governance: Ensure all automation pipelines maintain strict change control, comprehensive audit logs, clear execution tracking, and detailed runbook documentation
Skills
- Python Development: Strong scripting and programming experience for security workflows and tool integrations
- Ansible Orchestration: Hands-on experience building, scaling, and maintaining automation playbooks and configuration management using Ansible
- REST APIs & JSON: Extensive experience designing and implementing integrations using RESTful APIs, webhooks, and JSON data structures
- Security Operations & Domain Knowledge: Practical understanding of SOC processes, SIEM concepts, EDR/XDR, incident response, IAM, and endpoint security
- Git-Based Workflows: Solid understanding of software engineering practices, including Git, code reviews, branching strategies, and testing
- Experience with other orchestration tools like Itential, Aria Orchestrator, or similar SOAR products
- Cloud security experience across major public clouds (AWS, Azure, or GCP)
- Experience automating vulnerability management workflows and ticketing tools (ServiceNow, Jira)
- Familiarity with containerization and Kubernetes security
- Understanding of policy-as-code and compliance guardrail automation
Benefits
- Medical | Dental | Vision | 401(k)
Company Overview
Company H1B Sponsorship