AI-Driven Security Automation Engineer

Novanta Inc.; Barcelona; Híbrido; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

Novanta Inc. is seeking a Security Automation & AI Engineer to design, build, and maintain automated workflows and AI-driven solutions for its global security operations.

You will craft SOAR playbooks, detection-as-code pipelines, and AI-assisted tooling while aligning security with CI/CD practices and enterprise workflows. The role requires collaborating with IT, R&D, Cloud, and DevOps teams to embed security left in development lifecycle, automate vulnerability management, and drive scalable

Formación

• Education – Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, or a related field (or equivalent practical experience).
• Experience – 3–5 years of experience in security operations, security engineering, or DevSecOps, with a demonstrated focus on automation and tooling development.
• Programming – Strong proficiency in Python; experience with PowerShell, Bash, or other scripting languages. Ability to write production-quality, maintainable code.
• CI/CD & DevOps – Hands-on experience with CI/CD platforms (e.g., GitHub Actions, Azure DevOps Pipelines, Jenkins) and version control systems (Git). Understanding of software development lifecycle and DevOps practices.
• Security Tooling – Experience with SIEM platforms, EDR solutions, and/or SOAR platforms. Familiarity with DLP and IAM tools is a plus.
• Cloud & Infrastructure – Working knowledge of cloud platforms (AWS, Azure, or GCP) and infrastructure-as-code concepts.
• APIs & Integration – Strong experience building and consuming RESTful APIs for tool integration and data orchestration.
• AI/ML Awareness – Familiarity with AI/ML concepts and their practical application in cybersecurity (e.g., anomaly detection, automated classification, LLM-based workflows). Experience with AI frameworks or platforms is a plus.
• Frameworks – Understanding of security frameworks such as NIST, MITRE ATT&CK, and CIS. Knowledge of GDPR and its impact on security across a global company.
• Certifications (preferred) – Relevant certifications such as GIAC (GCSA, GMON), PCSAE (Palo Alto Certified Security Automation Engineer), AWS Security Specialty, or equivalent.

Responsabilidades

• Design, develop, and maintain security automation workflows and SOAR playbooks to streamline alert triage, enrichment, containment, and remediation processes.
• Build and maintain detection-as-code pipelines, enabling programmatic creation, testing, version control, and deployment of detection rules across SIEM and EDR platforms.
• Develop AI-assisted investigation tools and scripts that auto-correlate signals across security platforms (SIEM, EDR, DLP, IAM) to accelerate incident response.
• Automate vulnerability management workflows, including scan orchestration, prioritisation scoring, remediation tracking, and reporting to support the vulnerability management function.
• Serve as the security team's subject matter expert on R&D CI/CD pipelines (GitHub, Azure DevOps, build/release workflows), understanding how software is developed, tested, and deployed across Novanta's business units.
• Identify and implement opportunities to embed automated security checks and controls into CI/CD pipelines, shifting security left in the development lifecycle.
• Build and maintain API-level integrations between security tools and platforms, ensuring data flows efficiently without manual intervention.
• Collaborate cross-functionally with IT, R&D Engineering, Cloud, and DevOps teams to align security automation initiatives with broader technology strategies.
• Provide security automation expertise and communicate complex technical solutions to management and the leadership team.
• Contribute to the creation and continuous improvement of security automation documentation, runbooks, and operational procedures.
• Evaluate emerging AI and automation technologies for applicability to security operations, and lead proof-of-concept initiatives.
• Support the broader security operations team during incident response and threat hunting activities as needed.

Conocimientos

Python

PowerShell/Bash

CI/CD

Cloud platforms

REST APIs

AI/ML awareness

GDPR

Educación

Bachelor's degree in Computer Science/Cybersecurity/Software Engineering

Herramientas

GitHub Actions

Azure DevOps

Jenkins

SIEM

EDR

SOAR

DLP

IAM

RESTful APIs

Descripción del empleo

Novanta Inc. is seeking a Security Automation & AI Engineer to design, build, and maintain automated workflows and AI-driven solutions for its global security operations.

You will craft SOAR playbooks, detection-as-code pipelines, and AI-assisted tooling while aligning security with CI/CD practices and enterprise workflows. The role requires collaborating with IT, R&D, Cloud, and DevOps teams to embed security left in development lifecycle, automate vulnerability management, and drive scalable