Cybersecurity Automation Engineer: AI-Driven SecOps Workflows

AV

Virginia

Hybrid

USD 112,000 - 190,000

Full time

9 days ago

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

AeroVironment is seeking a Security Engineer to design, develop, and maintain automations across cybersecurity and enterprise tech platforms. The role emphasizes building scalable automation, AI-assisted workflows, and secure integration across SIEM, SOAR, cloud, and endpoint tools.

The ideal candidate brings strong scripting skills (Python/PowerShell), experience with security operations, and the ability to translate requirements into robust engineering solutions while collaborating with

Qualifications

3+ years in security engineering or related technical discipline.
Experience with Python or PowerShell automation.
Experience integrating enterprise platforms via APIs, including authentication and JSON handling.
Knowledge of security operations and incident response processes.
Experience with SIEM or SOAR platforms.
Familiarity with Git, code review, testing, and secure development practices.
Strong communication and ability to explain technical solutions to nontechnical stakeholders.
Bachelor's degree or equivalent practical experience.

Responsibilities

Design and maintain automation workflows across SIEM, SOAR, endpoint security, identity, vulnerability management, cloud, and ticketing platforms.
Develop integrations using REST APIs, web-hooks, SDKs, and scripting languages such as Python and PowerShell.
Automate alert enrichment, investigation support, case creation, evidence collection, notifications, and incident response actions.
Engineer workflows that correlate information across platforms to improve visibility, reduce manual effort, and support faster security decisions.
Partner with security analysts and incident responders to identify automation opportunities and translate operational playbooks into technical workflows.
Automate vulnerability management activities, including asset enrichment, remediation ticket creation, ownership assignment, escalation, and closure validation.
Build safeguards into automated actions with approvals, access restrictions, validation checks, and rollback procedures.
Implement secure authentication, secrets management, least-privilege access, and audit logging for integrations and service accounts.
Maintain automation code through version control, peer review, testing, documentation, and change management processes.
Monitor automation health, troubleshoot failures, and account for API limits and platform changes.
Document integration architectures, data flows, dependencies, operating procedures, and troubleshooting guidance.
Measure automation effectiveness through time saved and improved response times.
Support security control implementation and audit readiness by automating evidence collection and reporting.
Identify opportunities to use AI to enhance security automation with proper oversight.
Integrate AI capabilities into security workflows with human oversight and audit logging.
Evaluate AI-assisted workflows for accuracy and reliability.