Security Automation Engineer

Summary

Foresite Cybersecurity is a cybersecurity provider helping organizations manage complex threat landscapes through SecOps and managed detection and response solutions. The Security Automation Engineer will work directly with customers to design, build, troubleshoot, and document SOAR automation workflows, playbooks, blocks, and integrations, while providing hands-on enablement training.

Responsibilities

• Write and adapt Python scripts to build API integrations and configure automated actions within customer SOAR environments, applying foundational scripting skills rather than advanced software development
• Partner with customer stakeholders to understand their tools, processes, and pain points, then translate those requirements into tailored automation workflows, playbooks, and blocks
• Leverage Git and GitHub best practices to manage playbook and script repositories, maintaining clean, well-documented, and reusable automation assets across customer engagements
• Design, build, and troubleshoot automation playbooks, workflows, and blocks within Google SecOps SOAR to meet each customer's specific use cases and operational goals
• Serve as the primary technical point of contact during customer engagements, delivering hands-on enablement training so customer teams can confidently operate, maintain, and extend the automation you build
• Collaborate with customer stakeholders to identify bottlenecks in their security operations and implement automated solutions that measurably decrease mean-time-to-detection (MTTD) and response (MTTR)
• Create clear, customer-facing documentation for playbooks, workflows, and integrations delivered during each engagement, so customer teams can maintain and extend their automation long after the engagement ends

Skills

• You are a natural self-starter with excellent analytical skills and meticulous attention to detail
• You possess 3-5 years of experience in security engineering or security operations, combined with foundational Python scripting skills
• Comfortable working with RESTful APIs, parsing JSON structures, and integrating data across diverse platforms
• Demonstrated experience with GitHub (branching, merging, pull requests) for managing and version-controlling automation assets
• If you don't already have experience with Google SecOps SOAR (formerly Siemplify) or other major SOAR platforms, you have an active eagerness and aptitude to learn and master it quickly
• Strong interpersonal, presentation, and communication skills to work directly with customer teams, understand their pain points, and translate operational needs into automation and training that sticks

Qualifications

Must Haves

• You are a natural self-starter with excellent analytical skills and meticulous attention to detail
• You possess 3-5 years of experience in security engineering or security operations, combined with foundational Python scripting skills
• Comfortable working with RESTful APIs, parsing JSON structures, and integrating data across diverse platforms
• Demonstrated experience with GitHub (branching, merging, pull requests) for managing and version-controlling automation assets
• If you don't already have experience with Google SecOps SOAR (formerly Siemplify) or other major SOAR platforms, you have an active eagerness and aptitude to learn and master it quickly
• Strong interpersonal, presentation, and communication skills to work directly with customer teams, understand their pain points, and translate operational needs into automation and training that sticks

Benefits

• Fully Remote
• Robust medical insurance options for employees and their families
• Employer-paid Dental coverage
• Employer-provided Short-Term Disability (STD) coverage
• Employer-provided Long-Term Disability (LTD) coverage
• 3 weeks of paid vacation
• Additional sick leave
• Paid company holidays
• Access to world-class training and mentorship
• Support for career development, including deepening technical skills or moving into leadership