Senior Security Automation Engineer

Clearwater; Maharashtra; On-site; INR 3,343,000 - 4,298,000; Full time

Job summary

Clearwater is seeking a Senior Security Automation Engineer to design, build, and operate automation that scales security operations without proportional headcount growth.

You will own the automation lifecycle from mapping workflows to production monitoring, collaborating with SOC, IR, and IT teams. Expect hands-on coding in Python or Golang and a focus on reliable, maintainable systems for phishing triage, host isolation, user offboarding, and ticket handling.

Qualifications

• 5–10 years of combined experience in security engineering, security operations/incident response, or software engineering with a security focus.
• 2+ years specifically building security automation, SOAR playbooks, or equivalent orchestration solutions.
• Experience integrating security tools (SIEM, EDR, ticketing/ITSM) via APIs in production.

Responsibilities

• Workflow Orchestration: Design automated playbooks for common security scenarios using code or logic flows.
• API Integration: Build custom connectors to link disparate systems via REST/gRPC APIs.
• ChatOps: Develop bots for internal collaboration platforms to enable self-service security tasks.
• AI-Driven Triage: Implement Generative AI workflows to parse tickets, summarize alerts, and extract IoCs.

Skills

Python

Golang

RESTful APIs

Webhooks

SOAR

Incident Response

JSON

YAML

AI-driven automation

Tools

SOAR platforms

Serverless Functions

Workflow Engines

Job description

Position Summary

The Senior Security Automation Engineer designs, builds, and operates the automation that lets Clearwater's security operations scale without scaling headcount at the same rate. This role owns the full lifecycle of automation development — from mapping a manual security workflow, to building the integration and logic that automates it, to monitoring that automation in production — across phishing triage, host isolation, user offboarding, alert enrichment, and ticket handling. This is a builder role for someone who thinks like both a security practitioner and a software engineer: comfortable reasoning about incident-response logic and comfortable writing production-quality code that other engineers can maintain. The Senior Security Automation Engineer partners closely with SOC, Incident Response, and IT teams to find automation opportunities, and is expected to bring judgment about where automation — including AI-driven automation — helps versus where it introduces risk.

Specific Job Responsibilities

• Workflow Orchestration: Design automated playbooks for common security scenarios (e.g., phishing triage, host isolation, user offboarding) using code or logic flows.
• API Integration: Build custom connectors to link disparate systems (e.g., SIEM, EDR, Ticketing Systems) via REST/gRPC APIs.
• ChatOps: Develop bots for internal collaboration platforms (e.g., Slack/Teams) to enable self-service security tasks.
• AI-Driven Triage: Implement Generative AI workflows to autonomously parse tickets, summarize alerts, and extract Indicators of Compromise (IoCs).

Must-Have Skills

• Scripting & Coding: Strong proficiency in Python or Golang with a focus on API interaction and data processing.
• Integration Patterns: Expert understanding of Webhooks, RESTful design, and authentication methods (OIDC/OAuth/API Keys).
• Operational Logic: Experience with SOAR concepts (Logic Apps, Serverless Functions, or Workflow Engines) to automate decision trees.
• Security Context: Understanding of the Incident Response lifecycle and standard data formats (JSON, YAML).

Experience Required

• 5–10 years of combined experience in security engineering, security operations/incident response, or software engineering with a security focus.
• 2+ years specifically building security automation, SOAR playbooks, or equivalent orchestration solutions.
• Demonstrated experience integrating security tools (SIEM, EDR, ticketing/ITSM) via APIs in a production environment.

Qualifications, Skills, & Knowledge

• Strong proficiency in Python or Golang, with a focus on API interaction and data processing.
• Expert understanding of integration patterns: webhooks, RESTful design, and authentication methods (OIDC/OAuth/API keys).
• Practical experience with SOAR concepts — logic apps, serverless functions, or workflow engines — to automate decision trees.
• Solid understanding of the incident-response lifecycle and standard data formats (JSON, YAML).
• Ability to reason about failure modes and edge cases in automated workflows, not just the happy path.
• Clear written communication — this role documents its own work so others can rely on it.
• Ability to Embrace Clearwater's CLEAR Core Values Commitment to Client Success, Lead with Accountability, Integrity & Collaboration, Excellence in All That We Do, Advance Colleague Success, and Respect & Transparency

Professional Development Expectations

• Stay current on SOAR platforms, automation tooling, and applied generative-AI techniques relevant to security operations.
• Contribute reusable components, internal documentation, and lessons learned back to the automation practice.
• Mentor other engineers on secure coding and automation design as the team grows.
• Participate in relevant security engineering communities, conferences, or working groups to bring outside ideas back to the team.

The base salary range for this role is $35,000-$45,000.

• Base salary is part of our total rewards package which also includes the opportunity for merit-based salary increases
• Eligibility for our 401(k) plan
• Medical, dental, vision, life and disability insurances
• Leaves provided in line with your work state
• Our robust time-off policy includes flexible paid time off
• 11 paid holidays
• Paid sick time

Total compensation, including base salary to be offered, will depend on elements unique to each candidate, including applicable candidate experience, skills, education and other factors permitted by law.

Clearwater is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. Please inform Clearwater/Redspin’s Recruiting team if you need any assistance completing any forms or to otherwise participating in the application process.

Mental/Physical Requirements: Fast paced environment handling multiple demands. Must be able to exercise appropriate judgment as necessary. Requires a high level of initiative and independence. Excellent written and oral communication skills required. Requires the ability to use a personal computer for extended periods of time.