Intermediate Security Automation Engineer

Functieomschrijving

Do you want to work in a fast-paced environment, where your skills and knowledge are constantly being challenged? Do you have an interest in system administration and networking? Are you looking for a challenging role that allows you to build systems with security in mind? Then apply now!

As an Intermediate Security Automation Engineer, you'll be responsible for developing the automation systems that will automate security testing in the Linux environment. You will have a thorough understanding of web application development and security principles and will write automated tests for various applications using Python, JavaScript, Django, and jQuery. You should also have experience with both MAMP and VPS/Cloud environments.

Requirements

Main

• Experience with Linux administration
• Experience with programming using JavaScript, PowerShell, Python, REST APIs, GIT, HTML, CSS, Databases
• Experience with container services, including Docker
• Experience with one of the following areas: security operations, incident response, threat management, or security engineering
• Knowledge of general cybersecurity products and services

Advantageous Competencies

• SOAR Technology (xSOAR Palo Alto)
• Any cybersecurity qualifications
• Experience in log management platforms including Elasticsearch, Logstash, Kibana - ELK
• Certification: PCSAE
• Certification: Any public/private cloud related certification (Azure, AWS, etc.)

Responsibilities

• Create Playbooks and Use Cases for SOC/SOAR investigation and integrate into Cortex XSOAR Solutions.
• Integrate and build solutions through automation, orchestration, and coding, using 3rd party software.
• Build applications (Python, JavaScript, Django, jQuery) to assist with the build and install process of security managed services.
• Craft, build, and debug large scale cloud-based and on-premise distributed systems.
• Write, update, and maintain technical program, end-user documentation, and operational procedures.
• Utilize knowledge of various cybersecurity product ranges to build integrated solutions.

Qualifications

• Bachelor’s degree in Computer Science or related field required.
• Experience with Linux, including scripting language and command line experience preferred.
• Hands-on experience with Security Automation tools.
• Minimum three years of experience in the IT field with a background in software development.

Current tech stack

• xSOAR (SOAR)
• AWS
• McAfee ESM
• Microsoft ATP, AIP, Sentinel, Azure
• Symantec
• Fortigate, FortiSIEM, FortiAnalyzer, FortiManager
• Checkpoint
• Cisco Tetration, Umbrella, ASA, AMP
• SolarWinds
• ServiceNow
• LogRhythm
• Security Information and Event Management (SIEM)
• Endpoint Detection Response (EDR)
• Python, Django
• HTML, CSS, JavaScript
• Linux, Bash, Ubuntu, CentOs
• JSON, YAML
• ELK
• Docker
• GIT
• REST
• Confluence