Senior Tool Integration Engineer

Contingent Upon Contract Award

Remote with occasional on-site support

The Lead Tool Integration & Automation Engineer serves as the senior technical lead responsible for integrating, automating, engineering, and sustaining enterprise cybersecurity tools and capabilities. The position focuses on ensuring security technologies operate as an integrated ecosystem rather than as isolated products, enabling automated security operations, continuous monitoring, rapid detection and response, vulnerability management, compliance, and enterprise cyber defense. The engineer leads the design and implementation of integrations across cybersecurity platforms, enterprise infrastructure, cloud environments, applications, identity services, and IT service management capabilities.

This includes developing APIs, automation workflows, scripts, connectors, orchestration processes, and data pipelines that enable security tools to exchange information and automatically initiate security and operational actions. This position works closely with cybersecurity architects, SOC personnel, security engineers, Dev Sec Ops  teams, cloud and infrastructure engineers, application teams, and system owners to translate cybersecurity requirements into reliable, scalable, and supportable technical solutions.

In this role you will serve as the technical lead for cybersecurity tool integration, automation, and orchestration, providing engineering direction and technical oversight for enterprise security capabilities.

• Architect, design, implement, and maintain integrations between cybersecurity platforms and enterprise technologies using APIs, web services, event streams, message queues, connectors, scripts, and custom automation.
• Integrate security technologies supporting capabilities such as SIEM, SOAR, vulnerability management, endpoint security, identity and access management, cloud security, application security, network security, threat intelligence, asset management, and continuous monitoring.
• Design and implement automated cybersecurity workflows that reduce manual effort, improve consistency, accelerate response times, and enable repeatable security operations.
• Develop and maintain scripts, integration services, automation frameworks, and orchestration workflows using technologies such as Python, Power Shell, REST APIs, JSON, YAML, and other appropriate integration technologies.
• Engineer automated workflows for activities such as security alert enrichment, incident creation and escalation, vulnerability processing, asset reconciliation, compliance evidence collection, remediation tracking, and security control monitoring.
• Integrate cybersecurity platforms with enterprise services including ITSM/CMDB, identity platforms, cloud services, Dev Sec Ops  pipelines, infrastructure monitoring, asset inventories, logging platforms, and data repositories.
• Establish reliable and secure data flows between security systems, ensuring appropriate authentication, authorization, encryption, error handling, logging, data normalization, and transaction integrity.
• Evaluate existing cybersecurity tools and integrations to identify capability gaps, redundant functionality, manual processes, interoperability issues, and opportunities for automation or consolidation.
• Lead technical assessments, proofs of concept, tool onboarding, integration testing, production deployment, troubleshooting, and lifecycle engineering of cybersecurity capabilities.
• Develop scalable integration patterns and reusable automation components that can be applied across applications, platforms, and security domains.
• Ensure integrations are designed for availability, resiliency, scalability, maintainability, security, and operational supportability.
• Troubleshoot complex issues spanning multiple cybersecurity products, APIs, networks, applications, operating systems, identity platforms, and cloud services.
• Work with cyber architecture and engineering teams to ensure implementations conform to enterprise security architecture, Zero Trust principles, security policies, and applicable federal cybersecurity requirements.
• Support implementation and continuous improvement of…