Sr. Cybersecurity Automation Engineer – Multiple Offices (Hybrid)

Littler; Dallas (TX); Hybrid; USD 154,000 - 169,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Paid time off

Mental health programs

Parental leave

Job summary

Littler is seeking a Sr. Cybersecurity Automation Engineer to serve as the automation expert within the cybersecurity organization, collaborating with SOC, IAM, Governance, and IT teams to design secure workflows and measure automation effectiveness.

This hybrid role can be resident in multiple U.S. locations with monthly onsite expectations and a strong emphasis on automation across cloud, on-premises, and AI-assisted security initiatives.

Qualifications

• Bachelor's degree or equivalent relevant experience.
• 7+ years in cybersecurity, security engineering, security operations, or infrastructure security.
• 4+ years hands-on security automation, SOAR, workflow engineering, or security platform integration.
• Hands-on experience with SOAR playbooks, automated triage workflows, enrichment, containment and ticketing integrations.
• Strong scripting and automation skills (Python, PowerShell, REST APIs, JSON).
• Experience integrating SIEM, EDR/XDR, IAM, threat intelligence, and ServiceNow.

Responsibilities

• Design, develop, and maintain security automation workflows and SOAR playbooks.
• Automate alert triage, enrichment, incident response, containment, and ticketing.
• Integrate SIEM, EDR, IAM, threat intelligence, GRC, and ticketing platforms.
• Improve SOC efficiency through automation and orchestration.
• Automate joiner/mover/leaver processes and provisioning/deprovisioning workflows.
• Develop dashboards, reporting, and compliance metrics.

Skills

Identity & access management

Security monitoring

Cloud security

Governance & compliance

SOAR & automation

Scripting & automation

Education

Bachelor's degree or equivalent

Tools

SOAR

SIEM/XDR

ServiceNow

Terraform / IaC

Microsoft Azure

Job description

The Sr. Cybersecurity Automation Engineer is responsible for serving as the primary automation expert within the cybersecurity organization, partnering closely with the SOC, IAM, Cybersecurity Governance, Infrastructure Engineering, and IT Operations teams to design secure workflows, integrate platforms, document repeatable patterns, and continuously measure automation effectiveness.

This is a hybrid position and can be resident in Phoenix, AZ; Atlanta, GA; Minneapolis, MN; Seattle, WA; Charlotte, NC; Miami or Orlando, FL; or Dallas, TX, with an onsite expectation of once per month.

Pursuant to Washington and Minneapolis regulations, the salary range is $153,600 to $169,000 annually and includes eligibility for performance-based bonuses. Factors which may affect starting pay within this range may include geography/market, skills, education, experience and other qualifications of the successful candidate. We offer generous compensation and benefits packages. For more information visit: https://www.littler.com/benefits/state-details.

Responsibilities

Security automation and orchestration

• Design, develop, and maintain SOAR playbooks and security workflows.
• Automate alert triage, enrichment, incident response, containment, and ticketing.
• Integrate SIEM, EDR, IAM, threat intelligence, GRC and ticketing platforms.
• Improve SOC efficiency through automation and orchestration.

Identity and access automation

• Automate joiner, mover, leaver processes.
• Automate provisioning, deprovisioning, access reviews, and privileged access workflows.
• Support service account, non-human identity, and AI agent lifecycle management.
• Integrate identity events into security monitoring and response processes.

Governance, risk, and compliance automation

• Automate evidence collection, control monitoring, and audit workflows.
• Support ISO 27001, NIST CSF, CIS Controls, SOC2 and ISO 42001 compliance initiatives.
• Develop dashboards, reporting, and compliance metrics.
• Streamline risk, policy, and governance processes through workflow automation.

Cloud and infrastructure automation

• Develop Infrastructure as Code (Terraform, Bicep, ARM, etc.).
• Integrate security controls into CI/CD pipelines.
• Automate cloud security posture management and remediation.
• Maintain secure baselines and configuration standards.

AI-assisted security automation

• Implement AI-assisted investigation, triage, and response workflows.
• Support Microsoft Security Copilot and related AI security technologies.
• Develop secure AI automation with appropriate guardrails and governance.
• Evaluate emerging AI security capabilities.

Operational improvement and enablement

• Monitor and maintain automation platforms and workflows.
• Measure automation effectiveness and operational value.
• Document solutions, processes, and architecture.
• Mentor cybersecurity team members on automation best practices.

Qualifications

TECHNICAL SKILLS AND COMPETENCIES REQUIRED:

• Identity and access management, privileged access, service account governance, and Zero Trust principles.
• Security monitoring, SIEM, detection engineering, incident response, and SOC operating models.
• Cloud security, infrastructure security, endpoint security, vulnerability management, and secure configuration baselines.
• Governance, risk, and compliance concepts, including ISO 27001, NIST CSF, CIS Controls, and ISO 42001.
• Secure software development lifecycle concepts, API security, logging, monitoring, and evidence collection practices.

Education And Certifications

Bachelor’s degree or equivalent relevant experience.

Experience Required

• Minimum 7+ years in cybersecurity, security engineering, security operations, or infrastructure security.
• Minimum 4+ years of hands‑on security automation, SOAR, workflow engineering, or security platform integration experience.
• Hands‑on experience designing and maintaining SOAR playbooks, automated triage workflows, enrichment processes, containment actions, and ticketing integrations.
• Strong scripting and automation experience, including Python, PowerShell, REST APIs, JSON, and automation frameworks.
• Experience integrating SIEM, EDR/XDR, IAM, threat intelligence, ServiceNow, and related cybersecurity platforms.
• Experience with Infrastructure as Code, CI/CD security automation, Microsoft Azure, and cloud security technologies.
• Ability to operate as a senior individual contributor who can build solutions, document patterns, mentor others, and advise technical and operational stakeholders.

Preferred Experience

• Experience with Microsoft Sentinel, Defender, Entra ID, Omada, ServiceNow, OneTrust, and Microsoft Security Copilot.
• Experience implementing AI-assisted investigation, triage, response, governance, or compliance automation.
• Experience building dashboards, metrics, and reporting for operational performance, audit readiness, and executive visibility.
• Experience supporting non-human identity, service account, and AI agent lifecycle management.
• Experience mentoring cybersecurity team members on automation design, secure coding, platform integrations, and operational best practices.

About Littler

Littler is the largest globalemployment and labor law practice in the world exclusively devoted torepresenting management. With more than 1,900 attorneys in over 100 officesworldwide, Littler serves as the single source solution provider to the globalemployer community. Consistently recognized in the industry as a leading andinnovative law practice, Littler has been litigating, mediating and negotiating some of the most influential employment law cases and labor contracts on recordfor over 75 years.

Littler’s unparalleledcommitment to labor and employment law helps clients navigate a complexbusiness world with nuanced legal issues- building better solutions for clients’toughest challenges. With deep experience and resources that are local, everywhere,Littler is fully focused on its clients. With a diverse team of the brightestminds, Littler fosters a culture that celebrates original thinking. And withpowerful proprietary technology, Littler disrupts the status quo-deliveringbold, groundbreaking innovation that prepares employers not just for what’shappening today, but for what’s likely to happen tomorrow.

Benefits

We offer agenerous benefits package to full-time and part-time employees working at least a 50% schedule. Benefitsinclude comprehensive health, dental and vision plan for you, your spouse/domestic partner andchildren. In addition, we provide a superior 401(k) plan, ample time offprograms, mental health programs, family building and caregiving, generous paidparental leave, life insurance, disability insurance, a wellness program,flexible spending accounts, and an employee referral bonus program.

For moreinformation about our benefits visit: www.littler.com/benefits/state-details.

For moreinformation about our firm visit: www.littler.com.

Norecruiters – principals only. Littler is not accepting unsolicitedresumes from search firms for this position. Search firms who submit candidates for this position are not eligible for any form of compensation, even if thecandidate is successfully hired.

This job posting is a general description of thetypes of responsibilities that are required of an individual in this job. It is not intended to be a complete list of the responsibilities, duties andskills that may be required for this job.

#BeYOUatLittler