Security Automation Engineer

SYSTEMTEC is seeking a Security Automation Engineer for a remote opportunity for candidates working EST hours.Candidate will serve as a hands-on Security Engineer supporting enterprise cybersecurity operations, with a primary focus on security automation, Python development, system integrations, Linux platforms, and custom security tooling. The role will also provide engineering and operational support across identity management, vulnerability management, SIEM/SOAR, cloud security, monitoring, and other enterprise security technologies.

Required Qualifications of the Security Automation Engineer: 

• Applicants must be authorized to work for any employer in the U.S. We are unable to provide sponsorship or work with Third-Party agencies.
• Bachelor's degree in Information Technology, Computer Science, Software Engineering, Information Security, or a related field; 8+ years of relevant experience may substitute for education.
• 5+ years of experience supporting complex IT environments, cybersecurity systems, software development, system deployments, or related enterprise technologies.
• Hands-on experience engineering, integrating, troubleshooting, and supporting multiple cybersecurity technologies and operational functions.
• Advanced Python experience developing security automations, scripts, APIs, utilities, integrations, or custom applications.
• Strong Linux administration skills, including deployment, configuration, patching, scripting, monitoring, troubleshooting, service management, and lifecycle support.
• Experience developing automation and security workflows using Python, PowerShell, Bash, REST APIs, JSON, YAML, and vendor SDKs.
• Experience with enterprise security technologies such as IAM, vulnerability management, email security, endpoint security, SIEM, SOAR, logging, monitoring, cloud security, DSPM, or ASM.
• Strong troubleshooting skills across applications, operating systems, networks, security platforms, identity services, APIs, and system integrations.
• Solid understanding of security architecture, incident response, networking, access control, secure software development, systems administration, and cybersecurity frameworks.

Preferred Skills/Experience of the Security  Automation Engineer: 

• CISSP, Security+, GIAC, Linux, Python, cloud, IAM, or other relevant cybersecurity or technology certifications.
• Experience as a security engineering generalist in a large enterprise, shared-services, multi-tenant, or managed-services environment.
• Hands-on experience with Linux, Docker, security sensors, monitoring platforms, scripting, and platform administration.
• Familiarity with enterprise security technologies such as Palo Alto Networks, Proofpoint, Tenable, Cribl, WhatsUp Gold, or comparable products.
• Experience developing internal web applications, APIs, dashboards, databases, command-line tools, and software integrations.
• Experience creating security playbooks, runbooks, procedures, technical documentation, and knowledge-transfer materials.

Responsibilities of the Security Automation Engineer:

• Design, develop, deploy, and maintain Python-based security automations, custom tools, APIs, scripts, dashboards, utilities, and enterprise integrations.
• Build automated workflows supporting alert enrichment, investigation, triage, incident response, case management, notifications, escalation, containment, reporting, and vulnerability analysis.
• Engineer and support integrations between security platforms and enterprise systems using APIs, SDKs, web services, authentication methods, JSON, YAML, and other interfaces.
• Deploy, configure, patch, monitor, troubleshoot, and maintain Linux systems, containers, security sensors, collectors, applications, and related security infrastructure.
• Provide technical support to security architects, engineers, SOC analysts, incident responders, and stakeholders while monitoring platform health, automation performance, integration failures, and operational metrics.
• Participate in a 24x7 on-call rotation and provide after-hours support for maintenance, incident escalation, troubleshooting, and operational handoffs as required.

Work Location: Fully remote within the United States. Candidates must be able to work Eastern Time Zone hours.

Compensation / Benefits: Full-Time Employment with SYSTEMTEC means competitive compensation, access to health, dental, disability, and life coverage, and 401(k) with match.

***Please note: SYSTEMTEC is not set up to employ workers in the states of California, New York, and New Jersey.***