Security Engineer, Automation
Listed on 2026-05-07
-
IT/Tech
Cybersecurity, Systems Engineer, Security Manager
You’ll be the force multiplier for a security team that needs to operate like it's three times its size. There are secrets to migrate to Vault, detection rules to write, SAST/DAST pipelines to tune, lifecycle workflows to automate, and security tooling to integrate across every surface. This is not a Dev Ops role with a security label. You’ll build the automation layer that makes a lean security team operate at multiples of its size - writing the pipelines, integrations, and tooling that eliminate manual work and accelerate every security function.
We use AI heavily in our own security work. You should be comfortable building alongside AI code‑gen tools, using LLMs to accelerate development, and treating automation as the default answer to any repeatable process. If you see a manual workflow and immediately think about how to script it, you’ll fit in here.
We’re in‑person five days a week at our SF headquarters, with first Fridays remote.
What You’ll Build:- Secrets migration pipelines - moving application secrets into Hashi Corp Vault with zero downtime
- Security orchestration and automated response (SOAR) workflows - connecting alerts from Panther SIEM, Sentinel One EDR, and Wiz CSPM into automated investigation and response playbooks
- SAST/DAST pipeline tuning - reducing false positives, integrating findings into developer workflows, and building feedback loops that improve signal over time
- Identity lifecycle automation - onboarding/offboarding workflows that provision and deprovision access across 53+ SaaS applications via Okta
- Detection‑as‑code pipelines - version‑controlled detection rules that deploy through CI/CD, with testing and validation built in
- Security metrics and reporting dashboards - automated collection of KPIs that give leadership visibility without manual spreadsheet work
- You’ve built automation that a security team relies on daily - not just proof‑of‑concept scripts
- Strong software engineering skills in Python, Type Script, or Go - you write production‑quality code with tests, error handling, and documentation
- Experience with CI/CD systems (Git Hub Actions, Circle
CI, or similar) - you’ve built pipelines, not just used them - Familiarity with secrets management (Hashi Corp Vault, AWS Secrets Manager) - migration, rotation, and dynamic credential patterns
- Experience integrating security tools via APIs - SIEMs, EDR, CSPM, identity providers, ticketing systems
- You understand detection engineering well enough to write and tune rules, even if it’s not your primary focus
- 5+ years of professional experience in security engineering, security automation, Dev Sec Ops , or software engineering with a security focus
- Experience with SOAR platforms or building custom orchestration workflows
- Familiarity with infrastructure‑as‑code (Terraform, Cloud Formation) and Git Ops patterns
- Experience automating compliance evidence collection (SOC 2, ISO 27001)
- You’ve built integrations between identity providers (Okta, Azure AD) and downstream systems
- Background in detection engineering - writing Sigma rules, Panther detections, or similar
- You’ve measured and demonstrated the ROI of security automation in a previous role
- Equity ownership in a high‑growth, profitable company
- Relocation support to San Francisco, NYC, or London as needed
- Housing support near our SF office
- Daily meal stipend
- Premium fitness membership at Equinox
- Comprehensive health insurance
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).