Security Automation Architect — Cloud, AI & SOC

Soteria Reinsurance Ltd.; Durham, Northern (NC, KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Fidelity Investments is seeking a Senior Security Automation Engineer within the Security Operations Center to design and build automation platforms, improve detection and incident response workflows, and enable analysts to investigate threats more efficiently.

The role blends software engineering and cybersecurity, focusing on Python-based services, containers, cloud environments (Azure, AWS), and AI-assisted security workflows, with opportunities to contribute to threat hunting and automation

Qualifications

• 3+ years in information security incident response, detection engineering, security automation, or related field.
• Strong Python development for automation, tooling, integrations, or backend services.
• Experience with enterprise security technologies for SIEM, SOAR, and EDR.
• Hands-on experience with containers and cloud environments (Docker, Kubernetes, Azure, AWS).
• Ability to translate security challenges into scalable technical solutions and communicate clearly to security teams and leadership.
• Professional certifications (GCIH, GCFA, OSCP, CISSP) are a plus.

Responsibilities

• Design, develop, and maintain security automation platforms and integrations.
• Improve detection and response workflows to support faster investigations.
• Collaborate with threat-hunting and incident-response teams to operationalize AI/ML security workflows.
• Lead technical improvements and contribute to automation strategy and roadmap.

Skills

Python development

Security automation

Information security incident response

Threat hunting support

Communication to stakeholders

Education

Security certifications (GCIH, GCFA, OSCP, CISSP)

Tools

Docker

Kubernetes

Azure

AWS

SIEM

SOAR

EDR

Job description

Fidelity Investments is seeking a Senior Security Automation Engineer within the Security Operations Center to design and build automation platforms, improve detection and incident response workflows, and enable analysts to investigate threats more efficiently.

The role blends software engineering and cybersecurity, focusing on Python-based services, containers, cloud environments (Azure, AWS), and AI-assisted security workflows, with opportunities to contribute to threat hunting and automation