Network Security Engineering

Jobtailor; Town of Florida (NY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Jobtailor is seeking a security automation engineer to develop and maintain scripts and apps that support security operations across Defender, Panorama/SCM, and cloud platforms. You will build APIs, create data pipelines for SIEMs, and automate incident response in hybrid environments.

You will collaborate with cloud and security engineers to enforce secure configurations, monitor compliance, and sustain audit-ready documentation. A strong background in CI/CD security and IaC is expected.

Qualifications

• Bachelor's degree in computer science, cybersecurity or related field (or equivalent experience).
• Proficiency in Python, PowerShell, Bash or Go scripting languages.
• Experience with Defender, Panorama/SCM and cloud security APIs.
• Solid understanding of IAM, network segmentation, and compliance frameworks.
• Familiarity with IaC and automation tools like Terraform and GitHub.
• Experience with SIEM and SOAR platforms.
• Certifications such as Azure Security Engineer, PCNSE, AWS Security Specialty, CISSP are desired.
• This role is a W2 opportunity and BRMi sponsorship is not provided (from the posting).

Responsibilities

• Develop and maintain automation scripts and applications for security operations.
• Integrate Defender, Panorama/SCM and cloud APIs into internal dashboards.
• Build data pipelines to ingest and normalize logs into SIEMs like Microsoft Sentinel and Splunk.
• Collaborate to implement secure configurations, monitor compliance, and respond to threats.
• Automate remediation workflows and support SOAR integrations for incident response.
• Monitor health, performance and drift across cloud and on-prem environments.
• Document code and configurations for transparency and audit readiness.

Skills

Python Programming

Cloud Security Principles

SIEM Platforms

Infrastructure-as-Code (IaC)

DevSecOps Pipelines

CI/CD Security Integration

Education

Bachelor's degree in Computer Science or related field

Tools

Microsoft Defender

Palo Alto SCM

Azure

AWS

GCP

Microsoft Sentinel

Splunk

Terraform

GitHub

Job description

• Develop and maintain automation scripts and applications supporting security operations, configuration management, and policy enforcement across Microsoft Defender, Palo Alto SCM, and cloud platforms (Azure, AWS, GCP)
• Integrate APIs from Microsoft Defender XDR, Palo Alto Panorama/SCM, and cloud-native security tools into internal systems and dashboards
• Build and maintain data pipelines for ingesting and normalizing logs into SIEM platforms such as Microsoft Sentinel and Splunk
• Collaborate with cloud and security engineers to implement secure configurations, monitor compliance, and respond to threats in hybrid environments
• Automate remediation workflows and support SOAR integrations for incident response
• Monitor platform health, performance, and configuration drift across cloud and on-prem environments
• Document code, integration processes, and platform configurations for operational transparency and audit readiness
• Perform other duties as assigned

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience)
• Proficiency in scripting/programming languages such as Python, PowerShell, Bash, or Go
• Experience with Microsoft Defender APIs, Palo Alto Networks SCM/Panorama APIs, and cloud security APIs (Azure, AWS, or GCP)
• Solid understanding of cloud security principles, IAM, network segmentation, and compliance frameworks
• Familiarity with infrastructure-as-code (IaC) and automation tools (e.g., Terraform, Hugo, GitHub)
• Experience with SIEM and SOAR platforms
• Certifications such as Microsoft Certified: Azure Security Engineer Associate, PCNSE, AWS Certified Security - Specialty, or CISSP (Desired)
• Experience with hybrid cloud environments and multi-cloud security architectures (Desired)
• Knowledge of MITRE ATT&CK, CIS Benchmarks, and NIST frameworks (Desired)
• Experience with DevSecOps pipelines and CI/CD security integration (Desired)
• BRMi will not sponsor applicants for work visas for this position
• This is a W2 opportunity only

Core Competencies

Demonstrates expertise in developing automation scripts and applications for security operations, with a strong focus on cloud security principles and compliance frameworks. Proficient in integrating APIs and building data pipelines for SIEM platforms, ensuring operational transparency and effective incident response.

Highest-signal resume keywords

• Python Programming
• Microsoft Defender APIs
• Cloud Security Principles
• SIEM Platforms
• Infrastructure-as-Code (IaC)

ATS Optimization Keywords

Hard Skills

• Scripting Languages
• PowerShell
• Bash
• Go
• Automation Tools
• Terraform
• GitHub
• Cloud Security APIs
• DevSecOps Pipelines
• CI/CD Security Integration

Certifications & Qualifications

• Microsoft Certified: Azure Security Engineer Associate
• PCNSE
• AWS Certified Security - Specialty
• CISSP

Industry Keywords

• Hybrid Cloud Environments
• Multi-Cloud Security Architectures
• MITRE ATT&CK
• CIS Benchmarks
• NIST Frameworks

Tools & Technologies

• Microsoft Defender
• Palo Alto SCM
• Azure
• AWS
• GCP
• Microsoft Sentinel
• Splunk