Job#: 3053377 Job Description: Overview
The Client is seeking an experienced
Senior Security Automation Engineer to support cybersecurity automation, custom security tool development, identity and access management, Linux-based security systems, enterprise security platforms, and security operations.
This is a hands-on engineering role focused on designing, developing, implementing, integrating, and continuously improving security tools, applications, automations, systems, and services. The consultant will work with security architects, engineers, analysts, incident responders, and other stakeholders in a large, multi-tenant enterprise security environment.
Position Summary
The Senior Security Automation Engineer will primarily focus on security engineering, Python development, automation, scripting, custom tool development, API integration, system integration, and operational support. The role will also provide secondary support for identity and access management, Linux-based security sensors, data security posture management, attack surface management, SIEM, XDR, SOAR, logging, monitoring, vulnerability management, cloud security, and other evolving security technologies.
The successful candidate must be comfortable supporting both security engineering and security operations. This includes developing internal applications, APIs, SDK integrations, dashboards, command-line utilities, automated workflows, access controls, and other tools that enable analysts and incident responders to work more efficiently.
Key Responsibilities
Security Automation and Custom Tool Development- Plan, design, develop, deploy, administer, and support enterprise security automations and custom security tools.
- Develop Python-based automations, internal web applications, APIs, scripts, dashboards, command-line utilities, SDK integrations, and related software components.
- Build automated workflows supporting alert enrichment, triage, incident response, case management, notifications, containment, escalation, and reporting.
- Develop tools supporting CVE vetting, vulnerability enrichment, risk prioritization, tracking, and security decision support.
- Create, test, deploy, and maintain integrations using Python, PowerShell, Bash, REST APIs, JSON, YAML, vendor SDKs, web services, and other appropriate technologies.
- Implement appropriate workflow controls, including error handling, API throttling management, logging, monitoring, and data ingestion processes.
- Apply source control, testing, deployment, and secure software development practices to internal security applications and tools.
Security Platform Engineering- Assist with the planning, design, deployment, integration, administration, and operational support of enterprise security platforms.
- Support technologies involving:
- Data Security Posture Management (DSPM)
- Attack Surface Management (ASM)
- Identity and Access Management (IAM)
- Vulnerability management
- Email security
- Endpoint security
- SIEM
- XDR
- SOAR
- Logging and monitoring
- Network security
- Cloud security
- Threat intelligence
- Integrate security platforms with ticketing systems, case management platforms, notification services, identity platforms, enterprise data sources, APIs, SDKs, and other internal systems.
- Support current and future enterprise security products, which may include Palo Alto Networks, Proofpoint, Tenable, Cribl, and WhatsUp Gold.
Identity and Access Management- Support identity and access management functions across enterprise security systems.
- Assist with user provisioning and deprovisioning, access reviews, role-based access control, service accounts, and API credentials.
- Support authentication, authorization, and identity-based system integrations.
- Troubleshoot access, credential, permissions, and identity integration issues.
- Help ensure access controls align with security requirements and organizational standards.
Linux Systems and Container Support- Deploy, configure, patch, monitor, optimize, and troubleshoot Linux systems supporting enterprise security services.
- Support security sensors, collectors, connectors, applications, containers, and data-processing services.
- Administer Docker-based environments and related application components.
- Perform Linux scripting, service management, monitoring, lifecycle management, and technical troubleshooting.
- Support secure configuration, high availability, resiliency, backup, recovery, patching, and controlled change processes for Linux-based security systems.
Security Operations Support- Support security architects, engineers, SOC analysts, incident responders, and Client stakeholders through technical escalation and troubleshooting.
- Provide automation development, system integration, knowledge transfer, and operational handoffs.
- Participate in an on-call rotation supporting a 24x7 Security Operations Center.
- Provide after-hours maintenance, incident escalation support, and operational handoffs as needed.
- Assist with rapidly changing operational priorities and emerging security requirements.
- Support the transition of newly developed tools and automations into ongoing security operations.
Monitoring, Reliability, and Continuous Improvement- Monitor automation health, application availability, system performance, sensor status, integration failures, and API errors.
- Track vulnerability status, platform issues, and other security engineering and operational metrics.
- Troubleshoot complex issues across applications, security platforms, Linux systems, networks, identity services, and third-party integrations.
- Support strategic planning, solution design, implementation, performance optimization, and continuous improvement activities.
- Ensure security tools, applications, automations, and supporting services are highly available, resilient, recoverable, securely configured, and properly maintained.
- Develop and maintain playbooks, runbooks, procedures, system documentation, integration documentation, and technical support materials.
Architecture and Stakeholder Collaboration- Collaborate with security architects, engineers, analysts, incident responders, and Client stakeholders to design and improve enterprise security solutions.
- Align security engineering solutions with business goals, regulatory requirements, industry-standard frameworks, and organizational risk tolerance.
- Provide technical guidance and knowledge transfer to engineering and security operations teams.
- Communicate platform issues, operational risks, integration challenges, and recommended improvements to technical stakeholders.
Required Qualifications
- Broad, hands-on security engineering experience supporting multiple cybersecurity technologies, systems, integrations, and operational functions.
- Experience integrating enterprise technologies using APIs, SDKs, web services, vendor-supported interfaces, structured data formats, and authentication methods.
- Advanced Python development experience.
- Experience developing automation and response workflows using:
- Python
- PowerShell
- Bash
- REST APIs
- JSON
- YAML
- Vendor SDKs
- Experience developing or supporting internal web applications, APIs, dashboards, databases, command-line tools, and related software components.
- Strong experience troubleshooting complex issues across applications, security platforms, operating systems, networks, identity services, and integrations.
- Hands-on Linux experience involving deployment, configuration, patching, scripting, service management, monitoring, troubleshooting, and lifecycle management.
- Experience supporting IAM, DSPM, ASM, vulnerability management, email security, endpoint security, SIEM, SOAR, logging, monitoring, cloud security, and other enterprise security technologies.
- Strong understanding of enterprise security architecture, incident response, networking, access control, secure software development, systems administration, and industry-standard cybersecurity frameworks.
- Familiarity with full-stack development, source control, software testing, application deployment, and database technologies.
Education and Experience Requirements
- Bachelor's degree in Information Technology, Computer Science, Software Engineering, Information Security, or a related field.
- Eight years of relevant professional experience. Relevant experience may be considered in place of the education requirement.
- Five years of experience supporting large IT environments, security systems, software development, and/or enterprise system deployments.
Preferred Qualifications
- Experience serving as a security engineering generalist in a large, multi-tenant, shared-services, or managed-services environment.
- Hands-on experience with Linux, Docker, security sensors, monitoring platforms, scripting, and platform administration.
- Experience supporting SOC analysts, security engineers, incident responders, and enterprise customers.
- Experience working effectively within rapidly changing operational environments.
- Familiarity with enterprise security technologies such as:
- Palo Alto Networks
- Proofpoint
- Tenable
- Cribl
- WhatsUp Gold
- Experience developing security playbooks, runbooks, operational procedures, and technical documentation.
- Strong knowledge of DNS security and secure access technologies.
- Experience designing reliable automation workflows with appropriate error handling, recurring reporting, API management, and technical integration patterns.
Preferred Certifications
- CISSP
- CompTIA Security+
- GIAC certification
- Linux certification
- Python certification
- Cloud certification
- IAM certification
- Other relevant cybersecurity, security engineering, or platform certification
Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.
Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at
Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Everforth Apex team member can provide.
Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.
If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at or . Please note that this contact information is strictly to be used for medical ADA accommodations and that no other inquiries will be answered.
UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex Systems.
Never miss an opportunity! Create an alert based on the job you applied for.
