Security Integration and Automation Engineer

We are seeking a Cybersecurity Integration & Automation Engineer to architect and scale integrations across a modern, best-of-breed security stack. This role is responsible for turning a diverse set of security tools into a unified, automated, and intelligence-driven platform., * Own integration architecture across the security ecosystem, leveraging APIs, webhooks, and event-driven patterns.

• Build and scale automation workflows and playbooks using Tines (SOAR).
• Orchestrate cross-platform response actions (endpoint isolation, identity containment, SaaS risk mitigation).
• Correlate signals across endpoint, identity, network, SaaS, and data to improve detection fidelity.
• Integrate and normalize telemetry into SIEM for analytics and threat hunting.
• Lead integration across tools, including:
• CrowdStrike, Darktrace, Delinea
• Zscaler, Meraki
• Abnormal AI, Cyera, Valence, Oasis
• Island, Jamf, Intune
• Enable security visibility and controls across Azure and AWS.
• Leverage agentic coding platforms and AI-assisted development tools to accelerate integration, automation, and playbook creation.
• Drive automation-first operations to reduce manual effort and improve MTTR.
• Partner with Security, Cloud, and IT teams; mentor engineers and influence best practices.
• Drive a fully integrated security ecosystem with minimal silos.
• Increase automation and reduce operational overhead.
• Improve detection quality and response speed.
• Enable scalable, data-driven security operations.

• Strong experience with API integrations (REST, webhooks, JSON).
• Hands-on expertise with SOAR (Tines preferred).
• Experience using agentic coding platforms / AI-assisted development tools (e.g., code generation, workflow automation, or LLM-driven tooling).
• Proficiency in Python, JavaScript, or similar.
• Experience with SIEM pipelines, log normalization, and data integration.
• Solid background across multiple domains:
• Endpoint (EDR/XDR)
• Identity / PAM / NHI
• Network & SSE
• SaaS Security (SSPM)
• Data Security (DLP/DSPM)
• Experience with Azure and/or AWS.
• Strong understanding of attack chains, threat detection, and zero-trust models., * Experience with security data lakes.
• Event-driven or streaming architectures (e.g., Kafka).
• Building custom connectors or integration frameworks.
• Experience operationalizing AI/LLM-driven security or automation use cases.