Security Automation Engineer

Overview

Position: Security Automation Engineer
Department: Security
Reports to: Cyber Security Architect
Location: Full-time, work from home
Compensation: $70,000-$85,000 USD
Open through: February 18, 2026

Tessitura is a non-profit company dedicated to helping arts and cultural organizations thrive. CRM lies at the heart of our mission and our technology platform. With Tessitura in their toolkit, organizations can achieve their goals with ease. The Tessitura community includes over 800 cultural institutions in ten countries. Our staff provide 24/7 support and offer guidance to grow revenue and build lifelong engagement.

Job Summary:

The Security Automation Engineer works to ensure that effective security practices are integrated throughout the software development lifecycle and across Tessitura’s cloud services. As part of the security architecture and operations team, this role focuses on implementing secure CI/CD pipelines and developing security automation.

The Security Automation Engineer builds and maintains Security-as-a-Service capabilities for consumption by other teams at Tessitura. A key aspect of this position is creating secure “paved roads” that enable developers to move quickly while adhering to established security standards and reference architectures. The engineer embeds within project teams and partners closely with the Infrastructure Engineering team.

This position requires a solid and continuously reinforcing understanding of software development practices and a security-first mindset. This role is ideal for someone who is genuinely excited about making security accessible to engineering teams and who thrives in a collaborative, remote-work environment.

• Implement and maintain secure CI/CD pipelines using Bitbucket Pipelines, AWS Code Pipeline, and other automation tools as part of ensuring that security is integrated throughout the software development lifecycle.
• Develop secure “paved roads” including preconfigured Terraform modules, container images, and pipeline templates. Update the paved roads as security requirements and capabilities evolve. Contribute security requirements and standards to the Engineering Foundations.
• Create and maintain guardrails that enable developers to move quickly while automatically enforcing security standards.
• Build and maintain security scanning automation as part of CI/CD pipelines, including vulnerability scanning, static code analysis, and dependency checking.
• Build and maintain Security-as-a-Service offerings for internal use, e.g.:
  • Reusable security tools and libraries
  • Pre-approved design patterns and reference architectures
  • Developer-friendly documentation and how-to guides
• Build and maintain log ingestion pipelines and services to collect security-relevant data. Configure Splunk forwarders, inputs, and parsing configurations to ensure data collection is efficient and actionable.
• Build and maintain automations that streamline security operations and reduce manual processes.
• Embed into software engineering project teams as an assigned security representative.
• Continuously collaborate with the Infrastructure Engineering team
  , acting as the liaison between Security and Infrastructure Engineering.
• Track security tasks, projects, and vulnerabilities using Jira to ensure steady momentum and proper prioritization.
• Stay current with security automation best practices
  , emerging threats, and new security technologies.

• Collaborate with the Engineering team, including close partnership with the Infrastructure Engineering team.
• Collaborate with the Security Operations team around Security-as-a-Service offerings, security tooling including logging, compliance responsibilities, and the overarching goal of continuously improving Tessitura’s security posture.
• Implement security solutions designed by security and engineering leaders and architects.
• Maintain and improve Tessitura’s security posture, with a focus on protecting member-owned data.
• Take ownership of nominated security initiatives and foster a security-conscious culture across the organisation.
• Maintain an appropriate understanding of the security risks and compliance…