Security Automation Engineer, 18-month Term

BlackCube Labs; United States; Hybrid; USD 100,000 - 130,000; Full time

Benefits offered by this job

Flexible vacation and Kinaxis Days

Physical and mental well-being programs

Mentorship programs

Job summary

BlackCube Labs is seeking a Security Automation Engineer to design and implement automated security across hybrid environments. This role will focus on creating event-driven security automation, enforcing security guardrails, and integrating security checks into CI/CD pipelines. Ideal candidates will have a Bachelor’s degree, 5-7 years of relevant experience, strong collaboration skills, and proficiency in Python. The position allows for hybrid work arrangements and offers various benefits including flexible vacation and wellbeing programs.

Qualifications

• 5–7+ years of experience in security engineering or software engineering with a security focus.
• Strong software engineering mindset to design and build production systems.
• Experience operating production-grade systems with uptime and reliability.

Responsibilities

• Design and implement API-first security automation for detection and response.
• Build automation frameworks to enforce security standards.
• Integrate security automation into CI/CD pipelines.

Skills

Python

CI/CD security automation

Kubernetes security

Infrastructure as Code

GitHub security configuration

Vulnerability management

Education

Bachelor’s degree in Information Security, Computer Science, or equivalent

Tools

Terraform

Azure DevOps

GitHub Actions

Job description

Location

Ottawa, Canada - Hybrid.

Other Canadian locations - Remote.

About the role

The Security Automation Engineer designs, builds, and operates automated security capabilities across a hybrid enterprise environment spanning on‑premises infrastructure and public cloud platforms. This hands‑on, builder‑oriented role focuses on eliminating manual security effort by embedding security guardrails, detections, and remediation directly into platforms, pipelines, and operational workflows.

What you will do

• Security Automation & Engineering
  • Design and implement event‑driven, API‑first security automation for detection, response, and preventative controls.
  • Build reusable automation frameworks and libraries to enforce security standards across environments.
  • Replace manual security processes with code, workflows, and orchestration integrated into enterprise platforms.
• Infrastructure as Code (IaC) & Policy Automation
  • Enforce security guardrails via policy‑as‑code (OPA/Gatekeeper, Terraform, Sentinel, cloud‑native policy engines).
  • Automate scanning, validation, approval gates, and auto‑remediation for IaC drift and misconfigurations.
  • Develop secure IaC modules that embed security by default.
• Container Security Automation
  • Automate cluster and workload hardening (RBAC validation, admission control, policy enforcement).
  • Integrate image scanning, signing, and deployment validation into CI/CD.
  • Automate runtime signal collection and response for container workloads.
  • Embed security automation into CI/CD pipelines (SAST, SCA, DAST, secrets detection, IaC scanning).
  • Implement policy‑based gates and automated failure handling.
  • Automate SBOM generation, artifact signing, provenance checks, and attestation enforcement.
• GitHub Security Engineering
  • Automate GitHub Enterprise security controls: repository standards, branch protections, code scanning, secret scanning, dependency management.
  • Enforce least‑privilege access and token hygiene via automation.
  • Integrate GitHub security telemetry into SIEM and SOAR pipelines.
• Databricks & Data Platform Security
  • Automate Databricks workspace and cluster security (policies, permissions, secret scopes, token lifecycle).
  • Enforce data access guardrails and monitor for anomalous behavior.
  • Integrate Databricks telemetry into centralized logging and detection systems.
• Vulnerability Automation & Remediation
  • Build automated pipelines that prioritize, route, and remediate vulnerabilities based on risk context.
  • Integrate vulnerability data with ticketing, CI/CD, and config management systems.
  • Develop self‑service remediation workflows for engineering teams.
• Security Operations & Orchestration
  • Design and develop SOAR playbooks and automations for common and high‑impact security events.
  • Integrate signals from cloud platforms, endpoints, identity systems, Kubernetes, and CI/CD into SIEM.
  • Continuously tune detections to improve signal quality, reduce noise, and support analyst efficiency.
  • Embed automated security checks into change management workflows, including pre‑change validation and post‑change verification.

What we are looking for

• Primary Skills and Qualifications
  • Bachelor’s degree in Information Security, Computer Science, Information Technology, or equivalent practical experience.
  • 5–7+ years of experience in security engineering, site reliability engineering (SRE), or software engineering with a strong security focus.
  • Strong software engineering mindset with ability to design, build, and operate production systems.
  • Proven ability to balance security rigor with delivery speed and business outcomes.
  • Experience operating production‑grade systems with uptime, telemetry, and reliability requirements.
  • Strong collaboration skills with ability to enable engineering teams rather than block delivery.
  • Excellent written and verbal communication skills, with the ability to clearly articulate complex technical concepts.
  • Ability to work effectively in a fast‑paced, global environment with shifting priorities.
  • Preferred certifications: CCSP, CISSP, CKS, Azure or GCP Security Specialty, GIAC certifications relevant to cloud or automation security.
• Role Specific Skills and Experience
  • Strong software engineering skills: Python (preferred), Go or Java; REST APIs; event‑driven systems.
  • Infrastructure as Code (Terraform, CloudFormation, etc.) with policy‑as‑code enforcement.
  • Strong knowledge of CI/CD security automation (GitHub Actions, Azure DevOps, GitLab).
  • Hands‑on experience with Kubernetes security (admission control, PSS, network policy, signing, runtime security).
  • GitHub Enterprise security configuration and automation.
  • Databricks security architecture and automation.
  • AI / LLM workload security and usage controls.
  • Vulnerability management automation and remediation pipelines.
  • Identity‑first security (IAM, workload identity, key & secret lifecycle).
• Job ID: #Senior; #LI-EM1.

Benefits

• Flexible vacation and Kinaxis Days (company‑wide days off)
• Flexible work options
• Physical and mental well‑being programs
• Regularly scheduled virtual fitness classes
• Mentorship programs, training and career development
• Recognition programs and referral rewards
• Hackathons

For more information, visit the Kinaxis website at www.kinaxis.com or the company’s blog at http://blog.kinaxis.com.

Kinaxis welcomes candidates to apply to our inclusive community. We provide accommodations upon request to ensure fairness and accessibility throughout our recruitment process for all candidates, including those with specific needs or disabilities. If you require an accommodation, please reach out to us at [e-mail]. This contact information is for accessibility requests only and cannot be used to inquire about the status of applications.

Kinaxis is committed to ensuring a fair and transparent recruitment process. We use artificial intelligence (AI) tools in the initial step of the recruitment process to compare submitted resumes against the job description to identify candidates whose education, experience, and skills most closely match the requirements of the role. After the initial screening, all subsequent decisions regarding your application, including final selection, are made by our human recruitment team. AI does not make any final hiring decisions.