Cybersecurity Automation Engineer

AeroVironment, Inc.; Huntsville (AL); On-site; USD 112,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

401(k) with company match

9/80 work schedule

Job summary

AeroVironment, Inc. is seeking a Security Engineer to design, develop, and maintain automations across cybersecurity platforms. You will automate repetitive tasks, connect tools via REST APIs, and translate operational requirements into reliable engineering solutions.

The role emphasizes AI-aware security automation and collaboration with analysts and engineers. Responsibilities include building scalable automation, ensuring secure authentication, and maintaining code with version control.

Qualifications

• Three or more years of experience in security engineering, security automation, or a related technical discipline.
• Demonstrated experience developing and maintaining automation solutions using Python, PowerShell, or comparable languages.
• Practical experience integrating enterprise platforms through APIs, including authentication, JSON data handling, pagination, and error handling.
• Working knowledge of security operations, incident response processes, and common endpoint, identity, network, and cloud threats.
• Experience with SIEM or SOAR platforms and workflow orchestration tools.
• Familiarity with Git, code review, testing, and secure development practices.
• Ability to troubleshoot complex workflows and dependencies across multiple systems.
• Strong written and verbal communication skills, including the ability to explain technical solutions to nontechnical stakeholders.
• Ability to prioritize work, manage competing requirements, and independently deliver maintainable solutions.
• Bachelor's degree in cybersecurity, computer science, information technology, or a related field, or equivalent practical experience.

Responsibilities

• Design, build, and maintain automation workflows across SIEM, SOAR, endpoint security, identity, vulnerability management, cloud, and ticketing platforms.
• Develop integrations using REST APIs, web-hooks, SDKs, and scripting languages such as Python and PowerShell.
• Automate alert enrichment, investigation support, case creation, evidence collection, notifications, and incident response actions.
• Engineer workflows that correlate information across platforms to improve visibility, reduce manual effort, and support faster security decisions.
• Partner with security analysts and incident responders to identify automation opportunities and translate operational playbooks into technical workflows.
• Automate vulnerability management activities, including asset enrichment, remediation ticket creation, ownership assignment, escalation, and closure validation.
• Build appropriate safeguards into automated actions, including approval requirements, access restrictions, validation checks, and rollback procedures.
• Implement secure authentication, secrets management, least‑privilege access, and audit logging for integrations and service accounts.
• Maintain automation code through version control, peer review, testing, documentation, and established change management processes.
• Monitor automation health, troubleshoot failures, and account for API limits, platform changes, retries, and exception handling.
• Document integration architectures, data flows, dependencies, operating procedures, and troubleshooting guidance.
• Measure automation effectiveness through time saved, execution reliability, reduced manual handling, and improved response times.
• Support security control implementation and audit readiness by automating evidence collection and reporting.
• Identify and implement opportunities to use artificial intelligence (AI) to enhance security automation, including alert enrichment, investigation summaries, incident prioritization, and response recommendations.
• Integrate AI capabilities into security workflows with appropriate human oversight, data protection, output validation, and audit logging.
• Evaluate AI‑assisted workflows for accuracy, reliability, and measurable improvements in analyst efficiency and response time.

Skills

Python

PowerShell

API integration

SIEM/SOAR

Security automation

Git & code review

Incident response

Communication

Troubleshooting

Education

Bachelor's degree in cybersecurity or related field

Tools

Git

REST APIs

Scripting (Python/PowerShell)

Job description

Worker Type

Regular

Job Description Summary

The Security Engineer designs, develops, and maintains automations and integrations across cybersecurity and enterprise technology platforms. This role improves the speed, consistency, and effectiveness of security operations by automating repetitive tasks, connecting tools, and translating operational requirements into reliable engineering solutions. The ideal candidate combines strong scripting and integration skills with an understanding of AI, security operations, incident response, and enterprise infrastructure. This position requires technical problem‑solving, clear communication, and close collaboration with security analysts, platform engineers, and business stakeholders.

Position Responsibilities

• Design, build, and maintain automation workflows across SIEM, SOAR, endpoint security, identity, vulnerability management, cloud, and ticketing platforms.
• Develop integrations using REST APIs, web-hooks, SDKs, and scripting languages such as Python and PowerShell.
• Automate alert enrichment, investigation support, case creation, evidence collection, notifications, and incident response actions.
• Engineer workflows that correlate information across platforms to improve visibility, reduce manual effort, and support faster security decisions.
• Partner with security analysts and incident responders to identify automation opportunities and translate operational playbooks into technical workflows.
• Automate vulnerability management activities, including asset enrichment, remediation ticket creation, ownership assignment, escalation, and closure validation.
• Build appropriate safeguards into automated actions, including approval requirements, access restrictions, validation checks, and rollback procedures.
• Implement secure authentication, secrets management, least‑privilege access, and audit logging for integrations and service accounts.
• Maintain automation code through version control, peer review, testing, documentation, and established change management processes.
• Monitor automation health, troubleshoot failures, and account for API limits, platform changes, retries, and exception handling.
• Document integration architectures, data flows, dependencies, operating procedures, and troubleshooting guidance.
• Measure automation effectiveness through time saved, execution reliability, reduced manual handling, and improved response times.
• Support security control implementation and audit readiness by automating evidence collection and reporting.
• Identify and implement opportunities to use artificial intelligence (AI) to enhance security automation, including alert enrichment, investigation summaries, incident prioritization, and response recommendations.
• Integrate AI capabilities into security workflows with appropriate human oversight, data protection, output validation, and audit logging.
• Evaluate AI‑assisted workflows for accuracy, reliability, and measurable improvements in analyst efficiency and response time.

Basic Qualifications (Required Skills & Experience)

• Three or more years of experience in security engineering, security automation, software development, or a related technical discipline.
• Demonstrated experience developing and maintaining automation solutions using Python, PowerShell, or comparable languages.
• Practical experience integrating enterprise platforms through APIs, including authentication, JSON data handling, pagination, and error handling.
• Working knowledge of security operations, incident response processes, and common endpoint, identity, network, and cloud threats.
• Experience with SIEM or SOAR platforms and workflow orchestration tools.
• Familiarity with Git, code review, testing, and secure development practices.
• Ability to troubleshoot complex workflows and dependencies across multiple systems.
• Strong written and verbal communication skills, including the ability to explain technical solutions to nontechnical stakeholders.
• Ability to prioritize work, manage competing requirements, and independently deliver maintainable solutions.
• Bachelor's degree in cybersecurity, computer science, information technology, or a related field, or equivalent practical experience.

Other Qualifications & Desired Competencies

• Experience with platforms such as Microsoft security technologies, Azure Logic Apps, Azure Functions, Microsoft Intune, Palo Alto Networks, or Jira.
• Experience integrating AI capabilities, large language models (LLMs), or AI‑enabled security tools into automation workflows, with an understanding of their limitations and secure use.
• Experience supporting Azure Government, Microsoft GCC High, or other regulated enterprise environments.
• Familiarity with KQL, cloud automation, CI/CD pipelines, and infrastructure as code.
• Experience implementing automated response actions with human approval and operational safeguards.
• Familiarity with NIST incident response guidance, MITRE ATT&CK, CMMC, and NIST SP 800-171.

Success in This Role

Success is demonstrated through reliable automations that reduce analyst workload, accelerate investigations and remediation, improve consistency across security processes, and provide measurable operational value while maintaining appropriate oversight and control.

Physical Demands

Ability to work in an office environment (Constant). Required to sit and stand for long periods; talk, hear, and use hands and fingers to operate a computer and telephone keyboard (Frequent).

Clearance Level

No Clearance

Salary Range

$111,500 - $170,000

ITAR Requirement

This position requires access to information that is subject to compliance with the International Traffic Arms Regulations (“ITAR”) and/or the Export Administration Regulations (“EAR”). In order to comply with the requirements of the ITAR and/or the EAR, applicants must qualify as a U.S. person under the ITAR and the EAR, or a person to be approved for an export license by the governing agency whose technology comes under its jurisdiction. Please understand that any job offer that requires approval of an export license will be conditional on AeroVironment’s determination that it will be able to obtain an export license in a time frame consistent with AeroVironment’s business requirements. A “U.S. person” according to the ITAR definition is a U.S. citizen, U.S. lawful permanent resident (green card holder), or protected individual such as a refugee or asylee. See 22 CFR § 120.15. Some positions will require current U.S. Citizenship due to contract requirements.

Benefits

• AV offers an excellent benefits package including medical, dental, vision, 401K with company matching, a 9/80 work schedule and a paid holiday shutdown.
• For more information about our company benefit offerings please visit: http://www.avinc.com/myavbenefits.
• We also encourage you to review our company website at http://www.avinc.com to learn more about us.

About AV

AV isn’t for everyone. We hire the curious, the relentless, the mission‑obsessed. The best of the best. We don’t just build defense technology—we redefine what’s possible. As the premier autonomous systems company in the U.S., AV delivers breakthrough capabilities across air, land, sea, space, and cyber. From AI-powered drones and loitering munitions to integrated autonomy and space resilience, our technologies shape the future of warfare and protect those who serve. Founded by legendary innovator Dr. Paul MacCready, AV has spent over 50 years pushing the boundaries of what unmanned systems can do. Our heritage includes seven platforms in the Smithsonian—but we’re not building history, we’re building what’s next. If you're ready to build technology that matters—with speed, scale, and purpose—there’s no better place to do it than AV. We are proud to be an EEO/AA Equal Opportunity Employer, including disability/veterans.

Equal Employment Opportunity

AeroVironment, Inc. is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Qualified applicants will receive fair and impartial consideration without regard to race, sex, color, religion, national origin, age, disability, protected veteran status, genetic data, sexual orientation, gender identity or other legally protected status. ITAR U.S. Citizenship required.

About AV (Duplicate)

AV isn’t for everyone. We hire the curious, the relentless, the mission‑obsessed. The best of the best. We don’t just build defense technology—we redefine what’s possible. As the premier autonomous systems company in the U.S., AV delivers breakthrough capabilities across air, land, sea, space, and cyber. From AI-powered drones and loitering munitions to integrated autonomy and space resilience, our technologies shape the future of warfare and protect those who serve. Founded by legendary innovator Dr. Paul MacCready, AV has spent over 50 years pushing the boundaries of what unmanned systems can do. Our heritage includes seven platforms in the Smithsonian—but we’re not building history, we’re building what’s next. If you're ready to build technology that matters—with speed, scale, and purpose—there’s no better place to do it than AV.