Automation Security Engineer

GCS Recruitment; Washington (District of Columbia); On-site; USD 140,000 - 230,000; Full time

Job summary

Comcast's Cyber Security Operations Center seeks a Senior Security Automation Engineer to build intelligent automation that reduces manual work, cuts noise, and speeds incident response. You will create scalable, production-ready AI-driven workflows, collaborate with threat intel analysts, and translate security requirements into robust technical solutions.

The role emphasizes hands-on coding, experimentation with AI technologies, and end-to-end delivery from prototype to production in a

Qualifications

• Bachelor's degree or equivalent professional experience.
• 8+ years in software/security/automation engineering or related field.
• Hands-on software development experience.
• Experience building automation solutions or AI-powered applications for production environments.
• Experience with LLMs, generative AI, or agentic AI technologies.
• Strong Python and/or other modern programming language skills.
• Experience API integration with tools and external systems.
• Understanding of AI agent concepts: tool use, planning, memory, verification.
• Ability to design reliable, scalable technical solutions.

Responsibilities

• Design, develop, test, deploy, and operate production-grade security automation and AI-driven workflows.
• Build intelligent agents securely accessing security data and executing multi-step workflows.
• Develop automation for threat intel, threat hunting, detection engineering, investigations, and incident response.
• Apply AI/automation techniques: tool calling, RAG, structured generation, planning, verification, model routing, multi-agent coordination.
• Design memory, context management, task recovery, escalation, and human approval mechanisms.
• Reduce operational noise and false positives while speeding security response.
• Develop security controls and guardrails around AI agents and automations.
• Create evaluation/testing strategies for accuracy, reliability, and security.
• Evaluate emerging AI models, agent frameworks, and orchestration tech.
• Prototype new capabilities and transition to production environments.
• Collaborate with threat intel analysts, threat hunters, and incident responders to solve challenges.

Skills

Hands-on software development

AI/ML engineering

Python programming

API integration

AI agent concepts

Problem-solving

Production automation

Team collaboration

Security automation

Education

Bachelor's degree or equivalent

Tools

Kubernetes

Job description

This position is ideal for an engineer who enjoys solving complex problems and building new capabilities from the ground up. The role goes beyond traditional security scripting, SOAR configuration, or test automation. You will help develop intelligent systems that can augment and automate the work performed by threat intelligence, threat hunting, detection engineering, investigation, and incident response teams.

Key Responsibilities

• Design, develop, test, deploy, and operate production-grade security automation and AI-driven workflows.
• Build intelligent agents capable of securely accessing security data, invoking approved tools, maintaining context, and executing multi-step workflows.
• Develop automation that can assist with:
  • Threat intelligence
  • Threat hunting
  • Detection engineering
  • Security investigations
  • Incident response
  • Security data analysis
• Apply modern AI and automation techniques, including:
  • Tool calling
  • Retrieval-augmented generation (RAG)
  • Structured generation
  • Planning
  • Reflection
  • Verification
  • Model routing
  • Multi-agent coordination
• Design mechanisms for memory, context management, task recovery, escalation, and human approval.
• Build automation designed to reduce operational noise and false positives while improving the speed and consistency of security response.
• Develop appropriate security controls and guardrails around AI agents and automated workflows.
• Create evaluation and testing strategies to measure the accuracy, reliability, security, and performance of automation.
• Evaluate emerging AI models, agent frameworks, automation platforms, and orchestration technologies.
• Prototype new capabilities and transition successful solutions into reliable production environments.
• Work closely with threat intelligence analysts, threat hunters, detection engineers, incident responders, and security-data engineers to understand operational challenges.
• Translate security requirements and operational processes into scalable technical solutions.
• Develop clean, maintainable, scalable, and well-documented code.
• Troubleshoot, monitor, and continuously improve automation running in production.
• Participate in architecture, design, code reviews, and technical decision-making.
• Identify opportunities to automate repetitive or time-sensitive security processes and improve overall SOC efficiency.

Required Qualifications

• Bachelor's degree in Computer Science, Engineering, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.
• 8+ years of experience in software engineering, security engineering, automation engineering, AI/ML engineering, or a related technical field.
• Strong hands-on software development experience.
• Experience building automation solutions or AI-powered applications for production environments.
• Experience working with Large Language Models (LLMs), generative AI, or agentic AI technologies.
• Strong programming skills in Python and/or another modern programming language.
• Experience integrating applications with APIs, tools, data sources, and external systems.
• Understanding of AI agent concepts such as tool use, planning, context management, retrieval, memory, and verification.
• Experience designing and implementing reliable, scalable technical solutions.
• Strong analytical and problem-solving skills.
• Ability to work with both software engineers and security professionals to translate operational challenges into technical solutions.

Preferred Qualifications

• Experience building agentic AI systems or autonomous security workflows.
• Experience with security automation, SOAR, SIEM, or security orchestration platforms.
• Experience with cybersecurity operations, threat intelligence, threat hunting, detection engineering, or incident response.
• Experience with RAG, vector databases, embeddings, semantic search, or knowledge retrieval.
• Experience with multi-agent architectures and AI orchestration frameworks.
• Experience developing AI evaluation frameworks, testing harnesses, or benchmarking processes.
• Experience with Kubernetes, cloud platforms, microservices, APIs, and distributed systems.
• Experience implementing human-in-the-loop controls and approval workflows.
• Experience taking AI/automation solutions from proof of concept through production deployment.
• Familiarity with security controls and best practices for deploying AI systems in enterprise environments.

What We're Looking For

We're looking for a builder who can take an ambiguous security problem and turn it into a working, scalable automation solution.

The ideal candidate is comfortable getting hands-on with code, experimenting with emerging AI technologies, integrating multiple systems, and figuring out how to move an idea from prototype to production.

You don't necessarily need to come from a cybersecurity background. Strong AI, software engineering, and automation experience is the priority. You'll have the opportunity to work alongside experienced security professionals who can provide the domain expertise.

The Opportunity

Comcast's Cyber Security Operations Center is working toward a machine-speed SOC capable of responding quickly and effectively to large-scale and concurrent security incidents.

As a Senior Security Automation Engineer, you'll help build the intelligent automation that makes that possible-reducing manual work, cutting through noise and false positives, and giving security teams the ability to focus their expertise where it matters most.

GCS is acting as an Employment Business in relation to this vacancy.