Security Automation & Detection Engineer (Python + SIEM)

Apex Systems; Plano, Northern (TX, KY); Hybrid; USD 96,000 - 103,000; Part time

Job summary

Everforth Apex Systems is seeking a Security Automation & Detection Engineer for a hybrid role, onsite three days weekly either in Plano, TX, or Malvern, PA. The candidate will integrate threat intel, automate security processes, and develop detections to improve visibility into cyber risks.

The ideal candidate has hands-on security engineering experience, strong Python skills, and familiarity with SIEMs and threat intel feeds.

Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, or related field, or equivalent experience.
• Experience in security engineering, detection engineering, or security operations.
• Strong Python scripting and REST API integrations.

Responsibilities

• Integrate and operationalize threat intelligence within continuous monitoring.
• Develop detections using threat intel, vulnerability data, and third-party risk data.
• Analyze and transform security data for SIEM ingestion.
• Design and build automation, integrations, and reusable scripts.
• Create documentation and patterns to support production implementation.
• Automate workflows for third-party security data management.
• Collaborate with stakeholders to improve monitoring capabilities.

Skills

Python scripting

REST API integrations

Security engineering

Detection engineering

SIEM

Threat intelligence

Automation workflows

SOC

Vulnerability management

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Splunk

Elastic

SOAR platforms

Job description

Everforth Apex Systems is seeking a Security Automation & Detection Engineer for a hybrid role, onsite three days weekly either in Plano, TX, or Malvern, PA. The candidate will integrate threat intel, automate security processes, and develop detections to improve visibility into cyber risks.

The ideal candidate has hands-on security engineering experience, strong Python skills, and familiarity with SIEMs and threat intel feeds.