> Markdown version of [/jobs/ext/3052294-security-automation-engineer](https://www.wearedevelopers.com/jobs/ext/3052294-security-automation-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Automation Engineer - **Company:** Foresite, Inc. - **Location:** United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Application Integration Architecture, Cyber Security, Data Integration, Github, JSON, Python (Programming Language), Parsing, Software Engineering, Scripting, Mttr, Restful APIs, Software Version Control, Api Management, Security Orchestration, Automation & Response - **Published:** September 24, 2026 - **Apply:** https://www.thejobnetwork.com/job/1be37d95-cc74-4573-a2a7-3b94cab7ca16/security-automation-engineer ## About the Role * The Ultimate Problem-Solver: You are a natural self-starter with excellent analytical skills and meticulous attention to detail. You love troubleshooting automation workflows and finding practical solutions during live customer engagements. * Cybersecurity & Coding Hybrid: You possess 3-5 years of experience in security engineering or security operations, combined with foundational Python scripting skills. * API & Integration Specialist: Comfortable working with RESTful APIs, parsing JSON structures, and integrating data across diverse platforms. * GitHub Literate: Demonstrated experience with GitHub (branching, merging, pull requests) for managing and version-controlling automation assets. * Willingness to Learn SOAR: If you don't already have experience with Google SecOps SOAR (formerly Siemplify) or other major SOAR platforms, you have an active eagerness and aptitude to learn and master it quickly. * Client-Facing Communicator: Strong interpersonal, presentation, and communication skills to work directly with customer teams, understand their pain points, and translate operational needs into automation and training that sticks. ## Description Foresite is seeking a highly motivated and passionate Security Automation Engineer with a strong foundation in cybersecurity and foundational Python skills to join our growing Professional Services team. In this client-facing role, you will be instrumental in helping Foresite's customers deploy and adopt their SOAR-powered ecosystem, working directly with them throughout each engagement. This is a client-facing role. Your primary customers will be Foresite's external clients, not our internal Security Operations Center (SOC). Your work will center on building automation workflows, playbooks, and blocks tailored to each customer's environment, and delivering hands-on enablement training so their teams can confidently operate and extend what you've built. If you are an exceptional problem solver who enjoys translating security operations needs into practical automation, and who thrives on teaching and building strong customer relationships, we encourage you to apply! Note: While experience with Google SecOps SOAR is highly valued, we are fully prepared to train a strong Cybersecurity and Python specialist who has a passion and willingness to master the platform and enjoys working directly with customers. What You'll Do: As a Security Automation Engineer, you will act as a technical partner and enabler for our customers throughout each engagement. Your responsibilities will include: * Custom Scripting & Integration: Write and adapt Python scripts to build API integrations and configure automated actions within customer SOAR environments, applying foundational scripting skills rather than advanced software development. * Customer Discovery & Solution Design: Partner with customer stakeholders to understand their tools, processes, and pain points, then translate those requirements into tailored automation workflows, playbooks, and blocks. * Version Control & Asset Management: Leverage Git and GitHub best practices to manage playbook and script repositories, maintaining clean, well-documented, and reusable automation assets across customer engagements. * SOAR Playbook, Workflow & Block Delivery: Design, build, and troubleshoot automation playbooks, workflows, and blocks within Google SecOps SOAR to meet each customer's specific use cases and operational goals. * Customer Enablement & Training: Serve as the primary technical point of contact during customer engagements, delivering hands-on enablement training so customer teams can confidently operate, maintain, and extend the automation you build. * Continuous Improvement: Collaborate with customer stakeholders to identify bottlenecks in their security operations and implement automated solutions that measurably decrease mean-time-to-detection (MTTD) and response (MTTR). * Documentation: Create clear, customer-facing documentation for playbooks, workflows, and integrations delivered during each engagement, so customer teams can maintain and extend their automation long after the engagement ends. ## Related Videos - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [What Developers Get Wrong About Application Quality](https://www.wearedevelopers.com/videos/233-what-developers-get-wrong-about-application-quality) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)