Lead Cyber Security Automation Engineer - Hybrid

Profectus; Canberra; Hybrid; AUD 180,000 - 240,000; Full time

Job summary

Profectus is seeking an experienced Lead Cyber Security Automation Engineer to design and build automation capabilities within an Australian Government agency. You will develop automated workflows and playbooks that connect CSOC with SIEM, SOAR, threat intelligence and detection platforms.

Responsibilities include building scripts in Python, PowerShell and Ansible, automating threat intelligence ingestion, and enabling incident response orchestration.

Qualifications

• 5+ years designing cyber security automation playbooks and workflows.
• Integrating SIEM and SOAR with REST APIs, webhooks and connectors.
• Strong scripting in Python, PowerShell and Ansible.
• Knowledge of security operations: incident triage, threat hunting, response.
• Familiar with PSPF, ISM, Essential Eight and NIST.
• DevSecOps practices: source control, automated testing, CI/CD and releases.
• Translating security requirements into automated solutions.

Responsibilities

• Identify automation opportunities across detection, monitoring, investigation, threat hunting and incident response
• Develop automated workflows and playbooks that reduce repetitive analyst tasks and improve response times
• Automate alert enrichment, triage, escalation and remediation where appropriate
• Integrate security platforms through REST APIs, webhooks and custom connectors
• Build scripts and tooling using Python, PowerShell and Ansible
• Automate ingestion, normalisation, enrichment and distribution of threat intelligence
• Integrate threat intelligence sources with SIEM, SOAR, TIP, EDR and NDR platforms
• Automate Indicator of Compromise (IOC) lifecycle management, including validation, scoring, expiry and removal
• Build validation, exception handling, logging and monitoring into automated workflows
• Maintain automation code through source control, peer review, testing and controlled CI/CD releases
• Define data requirements for use cases and playbooks in line with the event logging strategy
• Mentor colleagues and share knowledge across a cross-functional agile team

Skills

Automation playbooks

Cyber security

Python

PowerShell

Ansible

REST APIs

SIEM/SOAR

Incident response

Tools

Python

PowerShell

Ansible

JSON

REST APIs

Webhooks

Job description

Profectus is seeking an experienced Lead Cyber Security Automation Engineer to design and build automation capabilities within an Australian Government agency. You will develop automated workflows and playbooks that connect CSOC with SIEM, SOAR, threat intelligence and detection platforms.

Responsibilities include building scripts in Python, PowerShell and Ansible, automating threat intelligence ingestion, and enabling incident response orchestration.