Security Automation and Orchestration Engineer

Huntington National Bank; Birmingham (AL); On-site; USD 70,000 - 140,000; Full time

Benefits offered by this job

Health insurance coverage

Wellness program

Life insurance

Disability insurance

Retirement savings plan

Paid leave programs

Paid holidays

Job summary

Huntington National Bank is seeking a Security Automation and Orchestration Engineer to design and implement automation across SecOps, threat detection, and compliance. You will build playbooks for SOAR platforms and integrate SIEM/EDR, IAM, and cloud security tools to scale security operations.

The role emphasizes collaboration with Cybersecurity, DevOps, and Infra teams, with on-call rotation and a focus on reducing manual monitoring efforts.

Qualifications

• 5+ years in production support and IT automation.
• 5+ years in operational security technologies or automation environments.
• 5+ years implementing technology lifecycles and best practices.
• Bachelor’s Degree or 4+ additional years of equivalent experience.

Responsibilities

• Design and implement automation for security operations (SecOps).
• Develop and maintain playbooks for SOAR platforms (Splunk SOAR, XSOAR, Microsoft Sentinel).
• Design, develop, and maintain scalable automation frameworks for cybersecurity operations.
• Automate compliance checks and reporting for frameworks like NIST, ISO 27001, CIS Controls.
• Integrate security tools (SIEM, EDR, firewalls, IAM) into automated workflows.
• Collaborate with cybersecurity, DevOps, and infrastructure teams to embed security into CI/CD pipelines.
• Lead initiatives to reduce manual monitoring effort and on-call remediation.
• Engage in automation strategy and mentor junior engineers.

Skills

Automation

SecOps

Python

PowerShell

CI/CD security

Education

Bachelor's Degree

Tools

Splunk SOAR

Palo Alto XSOAR

Microsoft Sentinel

Wireshark

TCPdump

Job description

Description

This position is an onsite position and available to be filled at any Huntington Corporate office location (see location options on posting)

Summary:

We are seeking a Security Automation and Orchestration Engineer with deep expertise in cybersecurity automation, or relevant technical automation experience with the ability to adapt to cybersecurity tooling. This role is pivotal in scaling our security operations, enhancing threat response, and ensuring compliance through intelligent automation across our digital infrastructure.

Duties and Responsibilities:

• Design and implement automation for security operations (SecOps), including threat detection, incident response, and vulnerability management

• Develop and maintain playbooks for SOAR (Security Orchestration, Automation, and Response) platforms such as Splunk SOAR, Palo Alto XSOAR, or Microsoft Sentinel

• Design, develop, and maintain scalable automation frameworks for Cybersecurity operations

• Automate compliance checks and reporting for frameworks like NIST, ISO 27001, and CIS Controls

• Integrate security tools (SIEM, EDR, firewalls, IAM) into automated workflows

• Collaborate with cybersecurity, DevOps, and infrastructure teams to embed security into CI/CD pipelines

• Lead initiatives to reduce manual effort in security monitoring, alert triage, and remediation

• Engage in automation strategy and mentor junior engineers

• Participation in rotating on-call schedule

Basic Qualifications:

• 5+ years of production support and IT automation

• 5+ years of operational experience with security technologies, or relevant technical automation environments

• 5+ years of implementing or utilizing technology lifecycles and best practices

• Bachelor’s Degree or 4+ additional years of equivalent experience

Preferred Qualifications:

• Expert level knowledge of core networking protocols including BGP, DNS, HTTP/S, DNS, etc

• Expert level knowledge of operating systems, e.g. Windows, Linux, & Unix

• Expert level network troubleshooting skills utilizing packet capture/analysis packages such as Wireshark, TCPdump, etc

• Excellent customer facing communication skills (both written and verbal)

• Ability to research, evaluate, and devise course of action for security hardware/software and tools to make overall impact on the enterprise’s existing security environment

• Strong scripting skills (Python, PowerShell, Bash) for security automation

• Deep understanding of cybersecurity principles, threat landscapes, and incident response

• Familiarity with cloud security automation (AWS, Azure, GCP)

• Proven track record of designing and implementing automation solutions across enterprise environments

Exempt Status: (Yes = not eligible for overtime pay) ( No = eligible for overtime pay)

Yes

Workplace Type:

Office

Our Approach to Office Workplace Type

Certain positions outside our branch network may be eligible for a flexible work arrangement. We’re combining the best of both worlds: in‑office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team.

Compensation Range:

$70,000 - $140,000 Annual Salary

The compensation range represents the anticipated low and high end of the base compensation range for this position. Actual compensation will vary based on various factors including but not limited to location, experience, and education. Colleagues in this position are also eligible to participate in an applicable incentive compensation plan. In addition, Huntington provides a variety of benefits to colleagues, including health insurance coverage, wellness program, life and disability insurance, retirement savings plan, paid leave programs, paid holidays and paid time off (PTO).

Huntington is an Equal Opportunity Employer.

Tobacco-Free Hiring Practice: Visit Huntington’s Career Web Site for more details.