Security Automation Engineer: SIEM & AI-Driven Orchestration

Cybersecurity Jobs; Huntsville (AL); On-site; USD 112,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, vision

401K with company matching

9/80 work schedule

Paid holiday shutdown

Job summary

Cybersecurity Jobs in Huntsville, AL seeks a security automation engineer to design and implement automation workflows across SIEM/SOAR, endpoint security, and cloud platforms. You will build integrations using REST APIs, web-hooks, SDKs, and scripting languages such as Python and PowerShell.

You will automate alert enrichment, evidence collection, and incident response actions while collaborating with security analysts to identify automation opportunities and translate operational playbooks

Qualifications

• 3+ years of experience in security engineering, security automation, software development, or related technical discipline.
• Experience developing automation solutions using Python, PowerShell, or comparable languages.
• Practical experience integrating enterprise platforms via APIs, including authentication, JSON handling, pagination, and error handling.
• Working knowledge of security operations, incident response processes, and common threats across endpoints, identity, network, and cloud.
• Experience with SIEM or SOAR platforms and workflow orchestration tools.
• Familiarity with Git, code review, testing, and secure development practices.
• Bachelor’s degree in cybersecurity, computer science, information technology, or equivalent practical experience.

Responsibilities

• Design, build, and maintain automation workflows across SIEM, SOAR, endpoint security, identity, vulnerability management, cloud, and ticketing platforms.
• Develop integrations using REST APIs, web-hooks, SDKs, and scripting languages such as Python and PowerShell.
• Automate alert enrichment, investigation support, case creation, evidence collection, notifications, and incident response actions.
• Engineer cross-platform correlation workflows to improve visibility and reduce manual effort.
• Collaborate with security analysts to identify automation opportunities and translate playbooks into technical workflows.

Skills

Security engineering

Security automation

Software development

Education

Bachelor's degree in cybersecurity, computer science, information technology, or related field

Tools

Git

REST APIs

PowerShell

Python

Azure Logic Apps

Azure Functions

Jira

KQL

Job description

Cybersecurity Jobs in Huntsville, AL seeks a security automation engineer to design and implement automation workflows across SIEM/SOAR, endpoint security, and cloud platforms. You will build integrations using REST APIs, web-hooks, SDKs, and scripting languages such as Python and PowerShell.

You will automate alert enrichment, evidence collection, and incident response actions while collaborating with security analysts to identify automation opportunities and translate operational playbooks