Automation & Detection Engineer

Our client, one of the world's leading media and entertainment companies, is looking to hire a Automation & Detection Engineer to join their team remotely in New York, NY!

*** This begins as a 3-month contract with any opportunity to extend/convert ***

Responsibilities

• Design, develop, and implement automated solutions for various security tasks, including threat detection, incident response, and vulnerability management.
• Utilize scripting languages (Python, PowerShell, etc.) and automation tools (Ansible, Jenkins, etc.) to create efficient and scalable automation workflows.
• Integrate automation solutions with existing security tools and platforms.
• Collaborate with security stakeholders to gather requirements and identify opportunities for automation.
• Analyze requirements and translate them into technical specifications for automation solutions.
• Prioritize automation projects based on business impact and security risk.
• Monitor the performance and availability of automation platforms and tools.
• Troubleshoot and resolve issues to ensure platform uptime and reliability.
• Optimize automation workflows to improve efficiency and reduce manual effort.
• Develop and maintain integrations with various APIs to automate data collection, analysis, and response.
• Ensure API integrations are secure, reliable, and compliant with security best practices.
• Thoroughly test automation scripts and workflows to identify and fix errors.
• Develop test cases to ensure the accuracy and reliability of automation solutions.
• Conduct performance testing to optimize automation processes.
• Detection Engineering: Develop, test, and deploy high-fidelity detection rules and signatures
• Tune and optimize detection rules to reduce false positives and negatives
• Conduct regular reviews of detection coverage and identify gaps

Requirements

• Must have experience with XSOAR and Splunk.
• Strong understanding of security principles, threat intelligence, and attack methodologies
• Proficiency in scripting languages (Python, PowerShell, etc.) and automation tools.
• Experience with API integration and RESTful APIs
• Knowledge of cloud technologies (AWS, Azure, GCP)
• Strong problem-solving and analytical skills
• Excellent communication and collaboration skills
• Experience with security information and event management (SIEM) systems and security orchestration, automation, and response (SOAR) platforms
• Knowledge of cloud security and cloud-native technologies

You will receive the following benefits:

• Medical Insurance - Four medical plans to choose from for you and your family
• Dental & Orthodontia Benefits
• Vision Benefits
• Health Savings Account (HSA)
• Health and Dependent Care Flexible Spending Accounts
• Life Insurance, Long-Term & Short-Term Disability Insurance
• Hospital Indemnity Insurance
• 401(k) including match
• Paid Sick Time Leave
• Legal and Identity Protection Plans
• Pre-tax Commuter Benefit
• 529 College Saver Plan

Applicants must be currently authorized to work in the United States on a full-time basis now and in the future.