Cybersecurity Automation Engineer — AI-Driven SecOps

VideoRay; Dayton (OH); On-site; USD 112,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, vision

401K with company matching

9/80 work schedule

Paid holiday shutdown

Job summary

AeroVironment is seeking a Security Engineer to design, build, and maintain automation across cybersecurity and enterprise platforms. The role emphasizes scripting, API integrations, and secure development practices to improve security operations.

The ideal candidate will have strong Python/PowerShell skills, experience with SIEM/SOAR, and the ability to translate operational requirements into reliable engineering solutions, while collaborating with security analysts and platform engineers.

Qualifications

• Three or more years of experience in security engineering or related disciplines.
• Experience developing automation with Python or PowerShell.
• Experience integrating enterprise platforms via APIs, including JSON handling and pagination.
• Understanding of security operations, incident response, and common threats.
• Experience with SIEM or SOAR platforms and workflow orchestration tools.
• Familiarity with Git, code review, testing, and secure development practices.
• Bachelor's degree in cybersecurity, CS, IT, or equivalent experience.

Responsibilities

• Design, build, and maintain automation workflows across SIEM, SOAR, endpoint security, identity, vulnerability management, cloud, and ticketing platforms.
• Develop integrations using REST APIs, web-hooks, SDKs, and scripting languages such as Python and PowerShell.
• Automate alert enrichment, investigation support, case creation, evidence collection, notifications, and incident response actions.
• Engineer workflows that correlate information across platforms to improve visibility, reduce manual effort, and support faster security decisions.
• Partner with security analysts and incident responders to identify automation opportunities and translate operational playbooks into technical workflows.
• Automate vulnerability management activities, including asset enrichment, remediation ticket creation, ownership assignment, escalation, and closure validation.
• Build appropriate safeguards into automated actions, including approval requirements, access restrictions, validation checks, and rollback procedures.
• Implement secure authentication, secrets management, least-privilege access, and audit logging for integrations and service accounts.
• Maintain automation code through version control, peer review, testing, documentation, and established change management processes.
• Monitor automation health, troubleshoot failures, and account for API limits, platform changes, retries, and exception handling.
• Document integration architectures, data flows, dependencies, operating procedures, and troubleshooting guidance.
• Measure automation effectiveness through time saved, execution reliability, reduced manual handling, and improved response times.
• Support security control implementation and audit readiness by automating evidence collection and reporting.
• Identify and implement opportunities to use artificial intelligence (AI) to enhance security automation, including alert enrichment, investigation summaries, incident prioritization, and response recommendations.
• Integrate AI capabilities into security workflows with appropriate human oversight, data protection, output validation, and audit logging.
• Evaluate AI-assisted workflows for accuracy, reliability, and measurable improvements in analyst efficiency and response time.

Skills

Python

PowerShell

APIs

Git

Education

Bachelor's degree in cybersecurity, computer science, information technology, or related field

Tools

SIEM

SOAR

REST APIs

Job description

AeroVironment is seeking a Security Engineer to design, build, and maintain automation across cybersecurity and enterprise platforms. The role emphasizes scripting, API integrations, and secure development practices to improve security operations.

The ideal candidate will have strong Python/PowerShell skills, experience with SIEM/SOAR, and the ability to translate operational requirements into reliable engineering solutions, while collaborating with security analysts and platform engineers.