Information Security Engineer - DevSecOps

You will be part of the Enterprise Cyber Security organization responsible for protecting Williams-Sonoma, Inc. through reliable, scalable security platforms and automation. The Security Dev Sec Ops  function partners with Security Operations, Incident Response, Threat Intelligence, Security Engineering, Identity & Access Management, and Infrastructure to build software and integrations that improve the effectiveness of enterprise security operations.

The team’s mission is to reduce repetitive manual work, strengthen response capabilities, and deliver secure, maintainable software and automation that support our associates, customers, and business.

As an Information Security Engineer - Dev Sec Ops , you will design, develop, deploy, and support SOAR playbooks, workflow automations, platform integrations, and custom applications used by the Enterprise Cyber Security team. This is a hands‑on engineering role with end‑to‑end responsibility for solution design, coding, testing, deployment, documentation, and production support. You will balance SOAR development, security automation, and custom software development while working closely with operational teams to translate security requirements into dependable technical solutions.

• Design, develop, test, deploy, and maintain SOAR playbooks and response workflows in Google Sec Ops SOAR and Palo Alto Cortex XSOAR.
• Build custom security applications, reusable services, scripts, and workflow automations that improve investigation, enrichment, triage, and response processes.
• Develop and maintain secure integrations using REST APIs, JSON, webhooks, and platform SDKs across Google Sec Ops SIEM, Crowd Strike, Tanium, Ping Identity, Delinea, MISP, and other enterprise systems.
• Own the full software development lifecycle, including requirements analysis, solution design, source control, testing, release management, documentation, and ongoing production maintenance.
• Apply Python and Power Shell to automate repeatable security operations tasks; use Git and CI/CD practices to manage versioning, code review, and controlled releases.
• Use Docker and container‑based development practices, and Terraform or other infrastructure‑as‑code approaches where appropriate for repeatable deployments.
• Partner with SOC, Incident Response, Threat Intelligence, Security Engineering, IAM, and Infrastructure teams to identify automation opportunities and translate operational needs into technical requirements.
• Troubleshoot failed playbooks, API integrations, custom applications, and production workflows; conduct root‑cause analysis and implement durable fixes.
• Build appropriate safeguards into automations, including least‑privilege access, credential protection, audit logging, error handling, testing, approval gates, and rollback procedures for disruptive actions.
• Participate in an on‑call rotation supporting production SOAR automations, integrations, and custom security applications.
• Evaluate AI‑assisted development and agentic automation opportunities, applying human review, security controls, and validation before production adoption.
• Maintain clear technical documentation, runbooks, and knowledge transfer materials to support reliable operations and cross‑team collaboration.

• 3+ years of experience in information security engineering, software development, Dev Sec Ops , security automation, or a related technical discipline.
• Bachelor's degree in Computer Science or related field, or equivalent work experience.
• Hands‑on software development and scripting experience using Python and Power Shell, with working knowledge of REST APIs and JSON.
• Experience building, testing, and maintaining automation workflows, platform…