SYSTEMTEC is seeking a Security Automation Engineer for a remote opportunity for candidates working EST hours.Candidate will serve as a hands-on Security Engineer supporting enterprise cybersecurity operations, with a primary focus on security automation, Python development, system integrations, Linux platforms, and custom security tooling. The role will also provide engineering and operational support across identity management, vulnerability management, SIEM/SOAR, cloud security, monitoring, and other enterprise security technologies.
Required Qualifications of the Security Automation Engineer:
- Applicants must be authorized to work for any employer in the U.S. We are unable to provide sponsorship or work with Third-Party agencies.
- Bachelor's degree in Information Technology, Computer Science, Software Engineering, Information Security, or a related field; 8+ years of relevant experience may substitute for education.
- 5+ years of experience supporting complex IT environments, cybersecurity systems, software development, system deployments, or related enterprise technologies.
- Hands-on experience engineering, integrating, troubleshooting, and supporting multiple cybersecurity technologies and operational functions.
- Advanced Python experience developing security automations, scripts, APIs, utilities, integrations, or custom applications.
- Strong Linux administration skills, including deployment, configuration, patching, scripting, monitoring, troubleshooting, service management, and lifecycle support.
- Experience developing automation and security workflows using Python, PowerShell, Bash, REST APIs, JSON, YAML, and vendor SDKs.
- Experience with enterprise security technologies such as IAM, vulnerability management, email security, endpoint security, SIEM, SOAR, logging, monitoring, cloud security, DSPM, or ASM.
- Strong troubleshooting skills across applications, operating systems, networks, security platforms, identity services, APIs, and system integrations.
- Solid understanding of security architecture, incident response, networking, access control, secure software development, systems administration, and cybersecurity frameworks.
Preferred Skills/Experience of the Security Automation Engineer:
- CISSP, Security+, GIAC, Linux, Python, cloud, IAM, or other relevant cybersecurity or technology certifications.
- Experience as a security engineering generalist in a large enterprise, shared-services, multi-tenant, or managed-services environment.
- Hands-on experience with Linux, Docker, security sensors, monitoring platforms, scripting, and platform administration.
- Familiarity with enterprise security technologies such as Palo Alto Networks, Proofpoint, Tenable, Cribl, WhatsUp Gold, or comparable products.
- Experience developing internal web applications, APIs, dashboards, databases, command-line tools, and software integrations.
- Experience creating security playbooks, runbooks, procedures, technical documentation, and knowledge-transfer materials.
Responsibilities of the Security Automation Engineer:
- Design, develop, deploy, and maintain Python-based security automations, custom tools, APIs, scripts, dashboards, utilities, and enterprise integrations.
- Build automated workflows supporting alert enrichment, investigation, triage, incident response, case management, notifications, escalation, containment, reporting, and vulnerability analysis.
- Engineer and support integrations between security platforms and enterprise systems using APIs, SDKs, web services, authentication methods, JSON, YAML, and other interfaces.
- Deploy, configure, patch, monitor, troubleshoot, and maintain Linux systems, containers, security sensors, collectors, applications, and related security infrastructure.
- Provide technical support to security architects, engineers, SOC analysts, incident responders, and stakeholders while monitoring platform health, automation performance, integration failures, and operational metrics.
- Participate in a 24x7 on-call rotation and provide after-hours support for maintenance, incident escalation, troubleshooting, and operational handoffs as required.
Work Location: Fully remote within the United States. Candidates must be able to work Eastern Time Zone hours.
Compensation / Benefits: Full-Time Employment with SYSTEMTEC means competitive compensation, access to health, dental, disability, and life coverage, and 401(k) with match.
***Please note: SYSTEMTEC is not set up to employ workers in the states of California, New York, and New Jersey.***