Sr. Cyber Security Engineer - Automation

Sr. Cyber Security Engineer - Automation

Explicitly calls out 'vibe coding' practices and requires building governed AI/agent automations with safe, reviewable AI-assisted development.

Senior Automation Security Engineer responsible for designing and delivering scalable, production-quality security automation to improve security posture and engineering velocity. The role focuses on Python-based services, Git Hub/Git Hub Actions, Terraform, AWS security automation, and building governed AI/agent workflows with strong observability and human-in-the-loop controls.

The Senior Automation Security Engineer designs, builds, and operates scalable automation to strengthen the organization’s security posture while enabling engineering velocity. The role focuses on reusable Python services, secure CI/CD patterns, Terraform-based guardrails, AWS security automation, and governed internal AI/agent workflows.

• Design, build, and operate reusable Python services, libraries, CLIs, and integrations that automate security controls and operational workflows.
• Define standards for reliability, testing, observability, secrets handling, access control, and lifecycle ownership of automations.
• Automate workflows including identity and access reviews, cloud configuration remediation, evidence collection, findings enrichment, exception management, and incident response orchestration.

• Own and improve Git Hub Actions patterns for secure CI/CD, including reusable workflows, OIDC-based cloud access, artifact controls, approvals, and policy checks.
• Integrate code scanning, dependency controls, secrets detection, IaC scanning, tests, and release gates into engineering workflows.
• Review workflow and repository permissions, third-party actions, supply-chain risks, and runner security and drive remediation.

• Design and maintain Terraform modules, guardrails, and policy-as-code controls for AWS environments.
• Automate secure AWS configuration across IAM, Organizations, VPC, Cloud Trail, Cloud Watch, S3, KMS, Lambda, ECS/EKS, Secrets Manager, and related services.
• Build detection and remediation flows with least-privilege, change controls, dry runs, rollbacks, and audit-ready logging.

• Develop governed internal AI automations and agents using approved models, tools, knowledge sources, and identity boundaries.
• Design agent workflows with explicit tool scopes, input validation, prompt-injection defenses, audit logs, evaluation cases, and human-in-the-loop approvals for material actions.
• Create reusable patterns for tool calling, retrieval/RAG, workflow orchestration, context handling, and secure deployment.
• Champion responsible AI-assisted or “vibe coding” practices, including review accountability and protection of internal data.

• Translate security and operational needs into an automation roadmap, architecture, and measurable outcomes.
• Lead technical design reviews, mentor engineers, and partner with platform, cloud, SOC, and application teams.
• Communicate tradeoffs and risk clearly to technical and non-technical stakeholders.

• Strong Python software engineering skills, including API integration, testing, packaging, error handling, and production troubleshooting.
• Hands-on expertise with Git Hub and Git Hub Actions (reusable workflows, OIDC, permissions, secrets, CI/CD controls).
• Strong Terraform experience: modules, state, plans, testing, and policy/guardrail implementation.
• Deep practical understanding of AWS security and cloud architecture, especially IAM, network boundaries, logging, encryption, and serverless/container services.
• Experience designing reliable, observable, least-privileged automation safe for rollout.
• Demonstrated ability to lead design discussions, review code, and guide cross-team work.
• Working knowledge of AI/LLM application risks and engineering controls for safe agentic automation.

• Experience with security orchestration, SIEM/SOAR, detection engineering, incident response, or vulnerability-management automation.
• Exper…