Senior Security Automation Engineer - Remote / Telecommute

• Assist in the planning, design, development, deployment, administration and operational support of enterprise security automations and custom security tools.
• Develop Python-based automations, internal web applications, APIs, SDKs, scripts, dashboards, command-line utilities and system integrations.
• Create automated workflows for alert enrichment, triage, incident response, case management, notifications, containment, escalation and reporting.
• Develop custom tools to assist with CVE vetting, vulnerability enrichment, prioritization, tracking and security decision support.
• Support security platforms including DSPM, ASM, IAM, vulnerability management, email security, endpoint security, SIEM, XDR, SOAR, logging, monitoring, network security, cloud security and threat intelligence.
• Integrate systems with ticketing, case management, notification, identity, data sources, APIs and SDKs.
• Support technologies such as Palo Alto Networks, Proofpoint, Tenable, Cribl, and WhatsUp Gold.
• Assist with identity and access management functions, including user provisioning, deprovisioning, access reviews, and role-based access control.
• Deploy, configure, patch, monitor, optimize and troubleshoot Linux systems supporting security sensors, collectors, connectors, and containers.
• Monitor and report on automation health, application availability, system performance, sensor status, and integration failures.
• Ensure high availability, resilience, backup, recovery, and lifecycle management for security tools and Linux systems.
• Collaborate with stakeholders to align solutions with industry-standard frameworks and regulatory requirements., MANTECH seeks a motivated, career-driven, and customer-focused Senior Network Engineer to join our team in Laurel, MD. You will play a critical role in supporting the enterprise …
• 6 days ago

• Broad hands-on security engineering experience supporting multiple cybersecurity technologies, systems, integrations and operational functions.
• Experience developing security automations, scripts, integrations, utilities and custom tools using Python.
• Strong experience troubleshooting complex technical issues across applications, security platforms, operating systems, networks, identity services and integrations.
• Linux system deployment, configuration, patching, scripting, service management, monitoring, troubleshooting and lifecycle management.
• Experience developing automation and response workflows using Python, PowerShell, Bash, REST APIs, JSON, YAML and vendor SDKs.
• Experience supporting IAM, DSPM, ASM, vulnerability management, email security, endpoint security, SIEM, SOAR, logging, monitoring, cloud security and other enterprise security technologies.
• Strong understanding of enterprise security architecture, incident response, networking, access control, secure software development, systems administration and industry-standard cybersecurity frameworks.
• Bachelor’s degree in an information technology, computer science, software engineering or information security related field or eight years of relevant work experience.
• Five years of experience in supporting large IT environments, security systems, software development and/or system deployments.
• Ability to pass a full credit check and criminal background check.
• Ability to obtain and retain annual CJIS certification.
• Availability for a monthly on-call rotation supporting a 24x7 SOC.
• Availability for after-hours maintenance and incident escalation support as needed., * Hands-on experience serving as a security engineering generalist in a large, multi-tenant, shared-services or managed-service environment.
• Hands-on Linux, Docker, security sensor, monitoring, scripting and platform administration experience.
• Experience supporting SOC analysts, security engineers, and incident responders.
• Familiarity with Palo Alto Networks, Proofpoint, Tenable, Cribl, or WUG.
• Experience developing playbooks, runbooks, procedures and technical documentation.
• CISSP, Security+, GIAC or other relevant cybersecurity certification.
• Linux, Python, Cloud, IAM or other relevant security engineering or platform certification.
• Advanced Python development experience and familiarity with full-stack development.

Skills:

• Python.
• PowerShell.
• Bash.
• REST APIs.
• JSON.
• YAML.
• Linux.
• Docker.
• IAM.
• DSPM.
• ASM.
• SIEM.
• SOAR.
• XDR.
• Vulnerability Management.
• Cloud Security.
• Network Security.
• Palo Alto Networks.
• Proofpoint.
• Tenable.
• Cribl.

Qualification And Education:

• Bachelor’s degree in IT, Computer Science, or related field (or equivalent experience).
• Minimum 5 years of experience in large IT environment support.
• Strong verbal and written communication skills.