Security Engineer Scripting and Automations Remote

Experian; Allen (TX); Remote; USD 90,000 - 130,000; Full time

Job summary

A leading company is seeking a Security Engineer to enhance their threat detection capabilities. This remote role involves managing security tools, developing scripts, and collaborating with various teams. Ideal candidates have extensive experience in security engineering, proficiency in Terraform and scripting, and a solid background in cloud environments. Join a diverse environment that prioritizes work/life balance and offers competitive benefits.

Benefits

Remote work within the US

Competitive compensation and bonus plan

Medical, dental, vision, and 401K benefits

Flexible work environment

Flexible time off

Qualifications

• 5+ years in security engineering or site reliability engineering.
• Proficiency in Terraform and experience with CI/CD pipelines.
• Knowledge of programming/scripting in Python/Golang.

Responsibilities

• Managing the content lifecycle of security use cases.
• Creating custom scripts to enhance SIEM functionalities.
• Collaborating with security teams to identify capability gaps.

Skills

Incident Response

Scripting

Terraform

Python

Cloud Migration

Agile Methodologies

Security Administration

Tools

Splunk

CI/CD Pipelines

REST APIs

Job description

Security Engineer - Scripting and Automations (Remote)

Reporting to the Threat Detection Manager, the Security Engineer will collaborate with teams including cyber threat intelligence analysts, SOC analysts, threat detection engineers, server and network administrators, security tool administrators, and department customers. The role requires experience in incident response and understanding of security log feeds mapped into the SIEM.

Responsibilities include:

• Understanding data feeds from multiple security tools and logs feeding the SIEM & UEBA technologies. Assessing capabilities and quality, and recommending improvements.
• Creating new use cases based on threat intelligence, analyst feedback, log data, and past incidents.
• Managing the content lifecycle: creating, testing, tuning, removing use cases, and maintaining documentation.
• Enhancing vulnerabilities across application environments.
• Collaborating with security teams and product SMEs to identify capability gaps.
• Developing parsers and field extractions for reliable content development.
• Creating custom scripts to enhance SIEM functionalities.
• Participating in root cause analysis of security incidents and recommending new data sources and enrichment strategies.

Qualifications:

• 5+ years in security engineering or site reliability engineering.
• Proficiency in Terraform and experience with Cloud Migration.
• Experience developing CI/CD pipelines for Infrastructure as Code.
• Knowledge of programming/scripting (Python/Golang).
• Experience with ETL onboarding for diverse log technologies.
• Supporting Splunk platform administration, dashboards, applications, and use cases.
• Developing REST APIs for external data capture.
• Familiarity with Agile methodologies.
• Understanding of log formats and data sources for SIEM analysis.
• Solid experience with Windows and Linux platforms, including security or system administration.

Benefits/Perks:

• Remote work within the US.
• Competitive compensation and bonus plan.
• Medical, dental, vision, and 401K benefits.
• Flexible work environment: remote, hybrid, or in-office.
• Flexible time off including volunteer days, vacation, sick leave, and holidays.

Additional Information:

At Experian, we celebrate diversity and prioritize our people. Our culture emphasizes DEI, work/life balance, development, authenticity, engagement, collaboration, wellness, recognition, and volunteering. Recognized as a Great Place to Work in 24 countries, a FORTUNE Best Company, and on Glassdoor with 4.4 stars, we foster an inclusive environment where everyone can succeed. We are an equal opportunity employer committed to accessibility and confidentiality.