Senior Security Automation Engineer

Beyond Finance; Chicago (IL); On-site; USD 160,000 - 195,000; Full time

Benefits offered by this job

Health, dental, and vision coverage

Generous PTO and paid holidays

401(k) matching

Job summary

Beyond Finance is seeking a Staff Security Engineer to design and implement automated security controls, logging pipelines, and SIEM integrations in a fast-growing environment. You will own tooling that scales security across cloud and on‑prem resources while writing custom Python code and building reusable IaC modules.

You will work hands‑on across AWS, SIEM, endpoints, CI/CD, and infrastructure repos, delivering secure defaults and self‑service capabilities for the security team.

Qualifications

• 8+ years of hands-on security engineering with a focus on automation, tooling, and instrumentation.
• Proficient in Python to build your own tooling and log pipelines.
• Hands-on experience building and operating log pipelines end to end: collection, parsing, enrichment, and delivery to a SIEM.
• Hands-on SIEM experience: onboarding sources and building or tuning detections and alerts.
• Experience deploying and managing endpoint security across macOS and Windows workstations, including virtual desktops.
• Hands-on Infrastructure as Code experience; Terraform required.
• Experience building CI/CD pipelines and wiring security checks into them.
• Working knowledge of a major cloud provider, ideally AWS.
• Operates independently and drives projects without day-to-day oversight.

Responsibilities

• Build and own our security log pipelines: extract logs, transform and enrich, land in SIEM for detection and investigation.
• Operate and tune our SIEM: onboard sources, build detections and alerts.
• Deploy and tune security controls across endpoints and AWS WorkSpaces desktops.
• Build internal tooling and automation in Python to reduce toil.
• Instrument environment by integrating tooling through APIs and connecting stack components.
• Establish secure defaults in IaC via reusable modules and policy as code.
• Build security into CI/CD: scanning, secrets detection, and policy gates.
• Treat pipelines and tooling as a platform you own and maintain reliability.
• Work directly in systems you don’t own; make safe changes and drive fixes.

Skills

Python scripting

Security automation

Log pipelines

Independent work

AWS familiarity

Tools

Terraform

CI/CD tooling

GitHub Advanced Security

SIEM tooling

Job description

Beyond Finance is seeking a Staff Security Engineer to design and implement automated security controls, logging pipelines, and SIEM integrations in a fast-growing environment. You will own tooling that scales security across cloud and on‑prem resources while writing custom Python code and building reusable IaC modules.

You will work hands‑on across AWS, SIEM, endpoints, CI/CD, and infrastructure repos, delivering secure defaults and self‑service capabilities for the security team.