Senior Security Automation Engineer — Security Operations Center

Habitat For Humanity Of Durham; Durham (NC); On-site; USD 120,000 - 180,000; Full time

Job summary

Fidelity’s Security Operations Center seeks a Senior Security Automation Engineer to design and build automation platforms, enhance detection and response, and empower analysts with scalable tools. You will develop Python services, integrate systems, and explore AI applications in security workflows.

The role requires hands-on experience with Docker, Kubernetes, and cloud environments, plus strong incident response and security automation skills across SIEM/SOAR and EDR.

Qualifications

• 3+ years in information security incident response, detection engineering, or security automation.
• Strong Python development experience building automation, tooling, integrations, or backend services.
• Experience with enterprise security technologies for SIEM, SOAR, and EDR.
• Hands-on experience with containers and cloud environments (Docker, Kubernetes, Azure, AWS).
• Understanding of network protocols, host-based forensics, attack techniques, and threat investigation.
• Ability to translate security challenges into scalable technical solutions and communicate clearly.
• Experience with production Kubernetes, infrastructure as code, or applying AI/LLMs to security is a plus.
• Security certifications such as GCIH, GCFA, OSCP, CISSP are a plus.

Responsibilities

• Design and develop security automation platforms and scalable tooling.
• Improve detection and response workflows and support threat hunting and incident response.
• Lead technical improvements and shape the security automation strategy and roadmap.
• Collaborate with analysts, engineers, and leaders to translate security challenges into solutions.

Skills

Python development

Security automation

Incident response

SIEM / SOAR

Docker

Kubernetes

Azure

AWS

Network forensics

Threat hunting

Tools

Docker

Kubernetes

Microsoft Azure

Amazon Web Services

Job description

Fidelity will not provide immigration sponsorship for this position.

Job Description:

The Role

As a Senior Security Automation Engineer in Fidelity’s Security Operations Center, we are building and advancing automation capabilities that strengthen global security operations and help protect Fidelity, its affiliates, partners, and customers. This role is focused on designing and developing security automation platforms, improving detection and response workflows, and creating scalable solutions that enable security analysts to investigate and respond to threats more effectively. Working at the intersection of software engineering and cybersecurity, this engineer is developing Python-based services and integrations, enhancing security monitoring and response capabilities, and identifying opportunities to apply artificial intelligence to security operations. The role is also leading technical improvements, supporting threat hunting and incident response, and shaping the strategy and roadmap for security automation.

The Expertise and Skills You Bring

• 3+ years of experience in information security incident response, detection engineering, security automation, or a closely related field.
• Strong Python development experience building automation, tooling, integrations, or backend services.
• Experience with enterprise security technologies for security information and event management, security orchestration and automated response, and endpoint detection and response.
• Hands-on experience with containers and cloud environments, including technologies such as Docker, Kubernetes, Microsoft Azure, and Amazon Web Services.
• Understanding of network protocols, host-based forensic analysis, common attack techniques, and security incident investigation.
• Ability to translate security challenges into scalable technical solutions and communicate technical concepts clearly to security analysts, engineers, and leaders.
• Experience with production Kubernetes, infrastructure as code, front-end development, systems architecture, or applying artificial intelligence and large language models to security workflows is preferred.
• Security certifications such as GCIH, GCFA, OSCP, CISSP, or comparable credentials are a plus.

The Team

Fidelity’s Security Operations Center helps protect the company by detecting, investigating, and responding to cybersecurity threats while continuously improving the technology and processes that support those efforts. We have a relentless commitment to protecting our customers and business, and our security automation capabilities help analysts work more efficiently, improve detection coverage, and respond to potential threats faster. Our team partners across cybersecurity, technology, engineering, and business groups, while also working with external technology and security providers to strengthen Fidelity’s defenses. Our greatest asset is our people, and we value learning, knowledge sharing, thoughtful experimentation, and using data and technology to continuously improve how we protect Fidelity.

Fidelity’s Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Certifications:

Category:

Information Technology

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.