Senior Security Automation Engineer

Senior Security Automation Engineer

Type: Contract Location: Columbia, SC Work Setting: Remote Candidate Location: Nationwide – must be able to work Eastern Time Zone hours Position Overview We are seeking a highly experienced Senior Security Automation Engineer to support a large, enterprise-scale cybersecurity environment. This is a hands-on engineering position focused heavily on Python development, security automation, custom security tooling, system integrations, Linux, IAM, and security operations. The ideal candidate is a security engineering generalist with strong software development and automation capabilities who can build tools and workflows while troubleshooting and supporting a broad ecosystem of enterprise security platforms.

Key Responsibilities Design, develop, deploy, and support enterprise security automations and custom security tools. Build Python-based applications, scripts, APIs, SDK integrations, dashboards, and command-line utilities. Develop automated workflows supporting alert enrichment, triage, incident response, containment, escalation, case management, and reporting. Develop tools supporting CVE analysis, vulnerability enrichment, prioritization, and tracking. Build and maintain integrations using Python, PowerShell, Bash, REST APIs, JSON, YAML, and vendor SDKs. Support security technologies across IAM, DSPM, ASM, vulnerability management, SIEM, XDR, SOAR, endpoint, email, cloud, logging, and monitoring. Deploy, configure, patch, monitor, and troubleshoot Linux systems and Docker-based environments. Support IAM functions including provisioning, access reviews, RBAC, service accounts, authentication, authorization, and API credentials. Troubleshoot complex issues spanning applications, operating systems, networks, security platforms, identity services, and integrations. Partner with security architects, engineers, SOC analysts, and incident responders on technical escalations and continuous improvement.

Required Qualifications 8+ years of relevant professional experience, or a bachelor's degree in an IT, Computer Science, Software Engineering, Information Security, or related field with applicable experience. 5+ years supporting large IT environments, security systems, software development, and/or system deployments. Broad hands-on security engineering experience across multiple cybersecurity technologies and operational functions. Strong experience developing security automations, scripts, integrations, utilities, and custom tools using Python. Strong troubleshooting experience across applications, security platforms, operating systems, networks, identity services, and integrations. Hands-on Linux deployment, configuration, patching, scripting, monitoring, troubleshooting, and lifecycle management experience. Experience developing automation and response workflows using Python, PowerShell, Bash, REST APIs, JSON, YAML, and vendor SDKs. Experience supporting IAM, DSPM, ASM, vulnerability management, email security, endpoint security, SIEM, SOAR, logging, monitoring, cloud security, and related enterprise security technologies. Strong understanding of enterprise security architecture, incident response, networking, access control, secure software development, and systems administration.

Preferred Qualifications Security engineering experience within a large multi-tenant, shared-services, or managed-service environment. Advanced Python development experience, including internal web applications, APIs, databases, source control, testing, and software deployment. Hands-on Linux, Docker, security sensor, monitoring, scripting, and platform administration experience. Familiarity with Palo Alto Networks, Proofpoint, Tenable, Cribl, WhatsUp Gold, or similar enterprise security technologies. Experience developing security playbooks, runbooks, procedures, and technical documentation. CISSP, Security+, GIAC, Linux, Python, Cloud, IAM, or other relevant cybersecurity/security engineering certification.

Additional Information Must be able to work core hours of approximately 8:30 AM–5:00 PM Eastern Time. Participates in a monthly on-call rotation supporting a 24x7 Security Operations Center (SOC). After-hours maintenance, incident escalation support, and operational handoffs may be required as needed. Any required onsite travel will be at the resource's expense. Pre-employment background screening is required. Selected candidates must obtain and maintain annual CJIS certification after onboarding.