Python Automation cybersecurity Engineer

Looking for Sr. Automation & Cybersecurity Engineer

Location:

Plano, Texas JD:
The Senior Automation & Cybersecurity Engineer is a hands-on technical leader responsible for designing, building, and scaling automation that powers the Security Operations Center (SOC). This role owns automated detection, enrichment, triage, response, and AI-assisted workflows that reduce analyst toil, improve signal quality, and strengthen incident response. The ideal candidate combines strong engineering fundamentals—scripting, API integration, SIEM/SOAR development, and cloud automation—with practical cybersecurity judgment.

They will partner with detection engineers, incident responders, analysts, and platform owners to convert repeatable processes into reliable, governed automation and safely pilot emerging AI and agentic capabilities.

Essential Functions:

· Design, build, and maintain automation for alert enrichment, correlation, triage, incident response, and case handoffs across SIEM/SOAR platforms such as Microsoft Sentinel, Defender/XDR, Azure Logic Apps, Tines, Service Now, Log Analytics, and Confluence.
· Develop integrations and tooling using Python, Power Shell, APIs, and cloud-native services, with production-quality error handling, monitoring, documentation, and reuse.
· Collaborate with detection engineers, incident responders, and SOC analysts to identify automation opportunities, improve detection workflows, reduce false positives, and streamline analyst operations.
· Design AI-assisted and agentic workflows for enrichment, investigation, summarization, and decision support, ensuring human-in-the-loop approvals, auditability, and measurable quality controls.
· Partner with security, infrastructure, platform, compliance, and risk teams; participate in code/design reviews; mentor others; and help establish reusable automation standards and patterns.