Security Automation Engineer

Security Automation Engineer

Foresite is seeking a highly motivated and passionate Security Automation Engineer with a strong foundation in cybersecurity and robust Python development skills to join our growing team. In this critical internal role, you will be instrumental in supporting and enhancing Foresite's proprietary security products, including our SOAR-powered ecosystem. This is a non-client-facing role. Your primary customer will be our internal Security Operations Center (SOC), and your work will directly empower them to triage, investigate, and respond to threats more effectively.

If you are an exceptional problem solver who thrives on building robust automation, writing clean code, and working behind the scenes to optimize security operations, we encourage you to apply!

Note:

While experience with Google Sec Ops SOAR is highly valued, we are fully prepared to train a strong Cybersecurity and Python specialist who has a passion and willingness to master the platform.

As a Security Automation Engineer, you will act as a core developer and technical enabler for our internal SOC. Your responsibilities will include:

• Custom Scripting & Integration:
  Write, optimize, and maintain robust Python scripts to build custom RESTful API integrations, automate repetitive workflows, and orchestrate security tool actions.
• Database & Data Management:
  Design and maintain databases (SQL/No
  
  SQL) to store, retrieve, and transition threat intelligence and alert data seamlessly within automated security workflows.
• Version Control & CI/CD:
  Leverage Git and Git Hub best practices to manage code repositories, review team playbooks, and maintain structured version control for all scripts and configurations.
• SOAR Playbook Enablement:
  Design, build, and troubleshoot automation playbooks within Google Sec Ops SOAR to support Foresite's proprietary tools and streamline analyst workflows.
• Internal SOC Support:
  Serve as the primary technical resource for our SOC analysts. Troubleshoot playbook failures, optimize ingestion pipelines, and act as a reliable partner in resolving engineering issues.
• Continuous Improvement:
  Collaborate with internal security engineering leadership to analyze bottleneck processes and implement automated solutions that dramatically decrease mean-time-to-detection (MTTD) and response (MTTR).
• Documentation:
  Create and maintain comprehensive internal documentation for custom integrations, database schemas, and playbook logic to support team cross-training and ongoing maintenance.

The Ultimate Problem-Solver:
You are a natural self-starter with excellent analytical skills and meticulous attention to detail. You love debugging complex code and finding elegant solutions to automation challenges.

Cybersecurity & Coding Hybrid:
You possess 3-5 years of experience in security engineering or security operations, combined with a strong background in Python development.

API & Integration Specialist:
Highly proficient in working with RESTful APIs, parsing complex JSON structures, and securely transmitting data across diverse platforms.

Git Hub & Database Literate:
Demonstrated experience with Git Hub (branching, merging, pull requests) and working directly with SQL or No

SQL databases.

Willingness to Learn SOAR:
If you don't already have experience with Google Sec Ops SOAR (formerly Siemplify) or other major SOAR platforms, you have an active eagerness and aptitude to learn and master it quickly.

Team Collaborator:
Strong interpersonal and communication skills to work closely with SOC analysts, understand their pain points, and translate operational needs into technical requirements.

At Foresite, we aren't just another security provider—we are a mission-driven partner helping organizations navigate an increasingly complex threat landscape. Founded by passionate security practitioners, we've grown into a global leader in Sec Ops and MDR by staying true to our core value: radical transparency. When you join Foresite, you are part of a "humans-first" culture where your expertise is valued, and your well-being is a priority.

We leverage our Google Cloud Premier Sec Ops…