About this role
Location
Fully Remote (must work Eastern Time hours; open to nationwide candidates within the contiguous United States).
Experience Level
Senior Level (8+ years of relevant experience, or 5+ years supporting large IT/security environments with a relevant bachelor's degree).
Role Overview
We are seeking a Security Engineer/Consultant to support enterprise security automation, custom tool development, identity and access management, and a broad range of security platforms. This role works alongside security architects, engineers, analysts, and incident responders to design, build, and maintain automations and tools supporting a large security operations program. The ideal candidate brings strong hands-on security engineering experience, advanced scripting/automation skills, and the ability to support both engineering and operational functions in a 24x7 environment.
Key Responsibilities
Security Automation & Tool Development
• Design, develop, and support Python-based automations, internal web applications, APIs, SDKs, scripts, dashboards, and command-line utilities.
• Build automated workflows for alert enrichment, triage, incident response, case management, notifications, containment, and escalation.
• Develop custom tools to support CVE vetting, vulnerability enrichment, prioritization, and tracking.
Security Platform Support & Integration
• Assist with planning, deployment, and operational support of security platforms, including DSPM, ASM, IAM, vulnerability management, email security, endpoint security, SIEM, XDR, SOAR, logging, and monitoring technologies.
• Integrate security tools with ticketing, case management, notification, identity, and data source systems via APIs and SDKs.
• Develop, test, deploy, and maintain automated workflows and scripts using Python, PowerShell, Bash, REST APIs, JSON, and YAML.
Identity & Linux Systems Management
• Support IAM functions, including user provisioning/deprovisioning, access reviews, role-based access control, and service account/API credential management.
• Deploy, configure, patch, monitor, and troubleshoot Linux systems supporting security sensors, collectors, connectors, and containerized (Docker-based) services.
Operational Support & Collaboration
• Support security architects, engineers, SOC analysts, and incident responders through troubleshooting, automation development, and technical escalation.
• Monitor and report on automation health, system performance, integration failures, and other security engineering metrics.
• Ensure high availability, resilience, patching, and controlled change processes for security tools and supporting systems.
• Collaborate with stakeholders to align solutions with business goals, industry frameworks, and regulatory requirements.
Required Qualifications
• Bachelor's degree in Information Technology, Computer Science, Software Engineering, Information Security, or a related field (8+ years of relevant experience may substitute).
• 5+ years of experience supporting large IT environments, security systems, software development, and/or system deployments.
• Broad hands-on security engineering experience supporting multiple cybersecurity technologies, systems, integrations, and operational functions.
• Experience integrating enterprise technologies using APIs, SDKs, web services, structured data formats, and authentication methods.
• Strong troubleshooting experience across applications, security platforms, operating systems, networks, and identity services.
• Experience with Linux system deployment, configuration, patching, scripting, and lifecycle management.
• Experience developing automation and response workflows using Python, PowerShell, Bash, REST APIs, JSON, YAML, and vendor SDKs.
• Experience supporting IAM, DSPM, ASM, vulnerability management, email security, endpoint security, SIEM, SOAR, logging, monitoring, and cloud security technologies.
• Strong understanding of enterprise security architecture, incident response, networking, access control, and secure software development.
Preferred Qualifications
• CISSP, Security+, GIAC, or other relevant cybersecurity certification.
• Linux, Python, Cloud, IAM, or other relevant security engineering/platform certification.
• Hands-on experience as a security engineering generalist in a large, multi-tenant, shared-services, or managed-service environment.
• Hands-on Linux, Docker, security sensor, monitoring, and platform administration experience.
• Experience supporting SOC analysts, security engineers, incident responders, and rapidly changing operational priorities.
• Familiarity with enterprise security technologies (e.g., firewall, email security, vulnerability management, and log routing platforms) and experience developing playbooks, runbooks, and technical documentation.
• Advanced Python development experience, including familiarity with full-stack development, internal web applications, databases, source control, and software deployment practices.
Core Skills & Attributes
• Strong technical depth across security engineering, automation, and systems administration.
• Excellent problem-solving and troubleshooting skills across complex, integrated systems.
• Ability to work independently while collaborating with a broader security engineering and operations team.
• Comfortable operating in a rapidly changing environment with shifting priorities.
• Strong documentation and knowledge-transfer skills.
• Available to support on-call rotation and after-hours operational needs as required.