Principal, Cybersecurity Automation - Remote

Work Flexibility:
Remote The Principal Security Automation & AI Engineer is the senior technical leader responsible for automation and AI across Cyber Defense. This role designs, builds, and operates scalable automation and AI solutions that reduce repetitive work, accelerate security operations, and allow analysts to focus on higher-value decision-making.

This is a hands-on engineering role. You will write code, establish technical standards, and build the foundational patterns others use. You will determine where AI can safely improve security operations, where human oversight is required, and measure the impact of solutions in production. All automation must be reliable, auditable, secure, and appropriate for the data it handles.

Preference will be given to candidates located in Eastern or Central time zones to support effective collaboration during core business hours.

What You Will Do Security Automation Own and prioritize the Cyber Defense automation roadmap based on analyst capacity gained, risk reduction, business impact, and implementation effort.

Design, build, and operate automation for alert triage, enrichment, containment, case management, and notification.

Extend automation across vulnerability management and threat intelligence, including asset context, remediation tracking, and indicator handling.

Build and maintain integrations across endpoint security, detection engineering, security data platforms, asset inventory, threat intelligence, and ticketing systems.

AI & Agentic Security Identify and implement high-value AI use cases across security operations, including triage, investigation summaries, detection development, and reporting.

Design, build, and operate AI agents and assistants using least privilege, scoped tool access, and human approval for consequential actions.

Develop evaluation frameworks to measure accuracy, reliability, consistency, and failure modes before and after deployment.

Implement safeguards against risks such as prompt injection, data leakage, and excessive agent permissions while keeping regulated data within approved environments.

Evaluate vendor AI capabilities against internally developed solutions and provide clear build, buy, or wait recommendations.

Engineering Excellence Treat automation, detections, prompts, and AI configurations as code using version control, peer review, automated testing, CI/CD, and appropriate change controls.

Operate production automation with monitoring, error handling, runbooks, rollback capabilities, and ongoing performance management.

Partner with Security Architecture, Privacy, Legal, and IT teams to support responsible AI governance and risk management.

Technical Leadership Establish engineering standards, reusable patterns, and reference architectures for security automation and AI.Mentor engineers and analysts to expand safe, scalable automation capabilities across Cyber Defense.

Define and report measurable outcomes such as analyst hours returned, time to triage and containment, automation coverage, reliability, and error rates.

Translate complex automation and AI concepts, capabilities, risks, and limitations for technical teams and executive audiences.

Required Qualifications Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field, or an equivalent combination of education and relevant professional experience.
8+ years of relevant experience in cybersecurity, security engineering, software engineering, automation, or related technology disciplines.

Demonstrated experience designing, deploying, and operating production security automation at enterprise scale.

Strong Python development skills with working proficiency in SQL and API integrations, including REST APIs,…