Security Automation Engineer

jackson; Lansing (MI); On-site; USD 110,000 - 150,000; Full time

Job summary

Jackson is seeking a Security Automation Engineer to design and develop automation for security tooling in the Information Security Department, reducing response times through automation.

The role includes administering security systems, implementing automation strategy, and collaborating with management. Requires 5+ years in IT and Security, strong scripting (Python/PowerShell), IAM/SIEM experience, and CI/CD knowledge.

Located in Lansing, MI; on-site role with equal opportunity employer.

Qualifications

• Bachelor's Degree and/or equivalent experience required.
• 5+ years of Information Technology experience required.
• 5+ years of experience developing scripts or automation required.
• 5+ years of Information Security specific experience or equivalent experience required.
• CISSP Certified Information Systems Security Professional or other equivalent certifications preferred.

Responsibilities

• Designs and develops automation to support security tools and threat detection systems.
• Identifies and implements automation to reduce response times for repeatable tasks.
• Guides automation strategy with management to ensure proper security coverage and risk mitigation.
• Participates in testing and evaluation of security software and automation solutions.

Skills

Python

PowerShell

REST APIs

Java

XML

SQL

CI/CD pipelines

Agile methodologies

Communication

Problem solving

Education

Bachelor's Degree or equivalent experience

Tools

Sailpoint IdentityIQ

SCM tools

Job description

Job Purpose

The Security Automation Engineer will be responsible for designing and developing software/systems to support the Security tools used in the Information Security Department. The Security Automation Engineer will play a key role in designing, developing, and implementing threat detection and vulnerability management- related systems, processes and addressing automation needs. The Engineer will help to develop technical solutions to decrease response times by automating repeatable tasks.

Essential Responsibilities

• Administers security-focused information systems, such as identity management, data loss prevention, SIEM, PKI, and eDiscovery/forensics.
• Identifies, assesses, and communicates risks relating to data, systems, and personnel and provides guidance on changes to reduce risk.
• Reviews violations of computer security procedures and provides guidance to end users to ensure violations are not repeated.
• Provides direction for automation Security strategy by working with management to ensure appropriate security coverage and mitigate risks.
• Participates in the evaluation and testing of security software and recommends automation strategy.
• Provides direction on best practices for automation and orchestration.
• Participates in forensic investigations and resolves automation problems as needed.
• Affects responses to Audit findings and helps provide automation solutions.
• Provides guidance and ensures alignment of software engineering best practices and principles within the group.
• Responsible for enforcing company policies and procedures.
• Performs other duties and/or projects as assigned.
• Provides after hours call assistance as needed.

Knowledge, Skills and Abilities

• Experience with the use and architectural aspects of a SIEM.
• Working knowledge of Software Configuration Management (SCM) and the tools that support it.
• Understanding of networking technologies and protocols that make up an enterprise environment.
• Experience deploying and managing cloud-based infrastructure.
• In-depth understanding of software engineering principles.
• Ability to work independently and collaborate with a team.
• Able to work within established configuration and change management policies to ensure awareness, approval, and success of modifications to the environment.
• Excellent communication skills and ability to communicate effectively with technical and non-technical staff.
• Development experience with Python and PowerShell.
• Working knowledge of application development concepts, including REST APIs, Java, XML and SQL.
• Working knowledge of Sailpoint IdentityIQ or equivalent IAM platforms, including identity lifecycle management, access certifications, workflow configuration, application integration, automated provisioning, and related configuration or development concepts.
• Knowledge of enterprise authentication protocols and their related authorization methods.
• Familiar with the concepts of continuous integration and development (CICD) pipelines
• Detail-oriented with strong analytical skills.
• Working knowledge of productivity, collaboration, cloud-based technologies, and automation platforms used to support workflow execution and process automation.
• Experienced user of Microsoft Office Suite and orchestration libraries.
• Experience in completing technical documentation.
• Technical aptitude for troubleshooting inefficiencies with operation/production activities.
• Familiar with Agile methodologies.
• Familiar with common computing platforms including Windows, Linux, and Mainframe.

Qualifications

• Bachelor's Degree and/or equivalent experience required.
• 5+ years of Information Technology experience required.
• 5+ years of experience developing scripts or automation required.
• 5+ years of Information Security specific experience or equivalent experience required.
• CISSP Certified Information Systems Security Professional or other equivalent certifications preferred.

Jackson is proud to be an equal opportunity workplace. The Company subscribes to and endorses federal and state laws and regulations relating to equal employment opportunity for all persons without regard to race, color, religion, gender, age, national origin, legally-recognized disability, marital status, legally-protected medical condition, citizenship, ancestry, height, weight, sexual orientation, veteran status, or any other factor not related to the needs of the job. The Company is committed to a policy of equal opportunity. Company facilities and campuses are tobacco-free environments.