Security Automation Engineer – Security Engineering

Jobtailor; Greensboro (NC); On-site; USD 110,000 - 160,000; Full time

Job summary

Jobtailor is seeking a Cybersecurity Automation Engineer to design and support automation solutions for cybersecurity incident management in Greensboro, NC. The role collaborates with business stakeholders and technical teams to analyze workflows, gather requirements, and deliver scalable automation using scripting, APIs, and AI tools.

The ideal candidate has 3+ years in security engineering, strong knowledge of cybersecurity principles, and hands-on scripting experience (PowerShell, Python,

Qualifications

• Bachelor’s degree or equivalent education, training, and work-related experience.
• Minimum of 3 years of experience in security engineering or related cybersecurity roles.
• Developing knowledge in cybersecurity principles, theories, and concepts.
• Experience in software development lifecycle security practices.
• Proficiency in implementing and managing information security technologies.
• Hands-on experience with scripting/automation (PowerShell, Python, JSON) and security tooling integration (SIEM, SOAR, EDR, APIs).
• Experience building or maintaining automation pipelines or workflows.
• Experience with workflow and automation platforms such as Power Automate, Power Apps, SOAR, or similar technologies.
• Strong troubleshooting and problem-solving skills.
• Experience with SOAR platforms or workflow automation (e.g., Power Automate, playbook tooling).
• Background in incident management.
• Experience with AI-assisted automation or Copilot-style workflows.
• Experience building metrics, dashboards, or reporting automation.
• Industry certifications (CISSP, CISM, GSEC).

Responsibilities

• Design and support automation solutions that improve incident management process efficiency.
• Collaborate with stakeholders to analyze workflows, gather requirements, and deliver scalable solutions.
• Triage, track, and coordinate incident-related actions in cyber incident response.
• Facilitate stakeholder communication and maintain incident documentation from detection to resolution.
• Assess workflows to identify automation and AI-enabled enhancements.
• Partner with stakeholders to design, develop, and implement scalable solutions.
• Build, implement, and maintain automation using scripting, APIs, AI tools, and Microsoft 365.
• Streamline workflows to reduce manual effort and improve consistency.
• Track action items and deliverables to support project execution.
• Create, edit, and maintain process docs and stakeholder communications.
• Facilitate timely communication across incident stakeholders.
• Maintain incident records, timelines, action logs, and post-incident docs.
• Communicate clearly with both technical and non-technical audiences.

Skills

PowerShell

Python

JSON

Power Automate

SOAR

EDR

APIs

Incident management

AI automation

Troubleshooting

Scripting

Education

Bachelor’s degree in Computer Science, Cybersecurity, or related field

Equivalent education/experience

Tools

SIEM

SOAR

Playbook tooling

Power Automate

Power Apps

APIs

EDR

Job description

Responsibilities

• Design and support automation solutions that improve cybersecurity Incident Management process efficiency
• Work with business stakeholders and technical teams to analyze workflows, identify automation opportunities, gather requirements, and help deliver scalable solutions
• Support Cyber Incident Coordination and response activities by helping triage, track, and coordinate incident‑related actions
• Facilitate stakeholder communication and maintain incident documentation from initial detection through resolution
• Assess business and operational workflows to identify opportunities for automation and AI‑enabled enhancements
• Partner with business stakeholders and technical teams to gather requirements and help design, develop, and implement scalable solutions
• Build, implement, and maintain automation capabilities using scripting, orchestration, APIs, AI tools, and Microsoft 365 platforms
• Streamline supported workflows to reduce manual effort, improve efficiency, and promote consistent execution
• Track action items and key deliverables to support project execution and timely follow‑through
• Create, edit, and maintain process documentation, stakeholder communications, and other written materials
• Facilitate timely communication across incident stakeholders
• Maintain incident records, timelines, action items, decision logs, and post‑incident documentation
• Communicate clearly with technical and non‑technical audiences

Requirements

• Bachelor’s degree or equivalent education, training, and work‑related experience
• Minimum of 3 years of experience in security engineering or related cybersecurity roles
• Developing knowledge in cybersecurity principles, theories, and concepts
• Experience in software development lifecycle security practices
• Proficiency in implementing and managing information security technologies
• Bachelor’s degree in computer science, Cybersecurity, or related field (or equivalent experience)
• Hands‑on experience with scripting/automation (PowerShell, Python, JSON) and security tooling integration (SIEM, SOAR, EDR, APIs)
• Experience building or maintaining automation pipelines or workflows
• Experience with workflow and automation platforms such as Power Automate, Power Apps, SOAR, or similar technologies
• Strong troubleshooting and problem‑solving skills
• Experience with SOAR platforms or workflow automation (e.g., Power Automate, playbook tooling)
• Background in incident management
• Experience with AI‑assisted automation or Copilot‑style workflows
• Experience building metrics, dashboards, or reporting automation
• Industry certifications (CISSP, CISM, GSEC)