Lead Cybersecurity Operations Automation Engineer

This role offers a hybrid work schedule providing the opportunity for in-person collaboration at our Wilmington, DE Tech Hub.

Responsible for designing, developing, and maintaining automated solutions to enhance the organization's security posture. This role focuses on streamlining security operations, improving incident response times, and reducing manual workloads through scripting, orchestration, and integration of security tools.

• Design and architect automated cybersecurity solutions for complex environments, ensuring alignment with organizational security objectives and scalability across diverse platforms.

• Develop and configure automated controls and workflows to enhance threat detection, response, and remediation capabilities while optimizing system performance and reliability.

• Lead testing and validation of security automation tools and scripts.

• Manage deployment of automation frameworks and orchestration platforms, ensuring minimal disruption to existing infrastructure and maximum operational efficiency.

• Define and implement tuning strategies for automated security processes, leveraging advanced analytics, AI, and machine learning techniques to reduce false positives and improve detection accuracy.

• Build and maintain automation playbooks and response scripts for incident handling, compliance enforcement, and routine security operations using tools like SOAR, SIEM, and EDR platforms.

• Drive collaboration between Cybersecurity, Dev Ops, and IT teams to embed security automation into CI/CD pipelines, cloud environments, and enterprise systems.

• Lead improvement initiatives within Cybersecurity team, implementing best practices and optimizing processes to enhance security capabilities.

• Actively partner with vendor to optimize security products and/or drive resolution of complex support issues.

• Assist leadership with vendor relationships by maintaining when licenses need to be renewed, informing when hardware needs to be refreshed or new technologies should be considered.

• Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues needing escalation to management.

• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.

• Complete other related duties as assigned.

• This role is used in the following cybersecurity function:

  • Automation Engineering – designs, develops, and maintains automated solutions to streamline security operations, decrease incident response times, and reduce manual workloads.

• Partners primarily with individual contributors and leaders within Cybersecurity and Technology, occasionally senior leaders within Cybersecurity

• Exercises judgement in selecting methods, techniques, and criteria in executing objectives. Exerts significant latitude in determining objective of assignment. Work is accomplished with limited direction.

• Advanced ability to use multiple Cybersecurity tools, specific to function.

• Bachelor's degree and a minimum of 5 years’ relevant work experience, or in lieu of a degree, a combined minimum of 9 years’ higher education and/or work experience

• Advanced understanding of the security system development and infrastructure lifecycle and architecture, and systems design

• Proficiency in Python, Power Shell, or Bash

• Experience with SOAR, SIEM and EDR platforms

• Knowledge of network protocols, threat intelligence, and incident response

• Familiarity with cloud security and infrastructure-as-code tools

• Experience integrating security tools with enterprise systems and CI/CD pipelines

• Demonstrated ability to translate architecture into technical requirements

• Strong ability to analyze and draw reliable conclusions based on large volumes of quantitative data from diverse sources

• Ability effectively serves in indirect leadership role

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $ - $ (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.

Wilmington, Delaware, United States of America