СШАSecurity Automation Engineer
3 нед. назад
США
Security Automation Engineer role at focused on automating security processes to support their fast-growing e-commerce platform.
Обязанности
- [MUST refer to the latest Job Post Template] [US] Standard Job Post Template
- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
- Design and develop normalization, enrichment, and automated triage workflows to analyze and process security detection events at scale.
- Design, develop, and operate SOAR workflows that streamline and automate security operations processes.
- Build and maintain integrations with security platforms and external services, including SIEM, EDR, CTI, ticketing systems, and SaaS/API-based solutions.
- Develop and enhance the AI-SOC framework by creating LLM-based triage and analysis logic, confidence scoring mechanisms, and automated response orchestration capabilities.
- Drive operational excellence by managing incident response for SOAR and automation systems, operating logging and monitoring infrastructure, and improving system reliability.
- Design and implement automated response scenarios based on detection use cases while collaborating closely with SOC and Incident Response teams.
- Analyze and optimize automation workflows by identifying performance bottlenecks and driving continuous improvements in efficiency, scalability, and effectiveness.
Требования
- 5+ years of professional software engineering experience with strong proficiency in Python development, including modular design, code quality, exception handling, and testing
- Experience designing, implementing, and improving security event processing, detection, and response workflows through software engineering
- Hands-on experience with security technologies such as SIEM, EDR, SOAR, and CTI platforms, including customization, integration, and operational support
- Experience developing integrations using RESTful APIs, Webhooks, and JSON-based data processing
- Experience designing, building, and operating systems in cloud environments, preferably AWS
- Strong problem-solving skills with the ability to diagnose, troubleshoot, and resolve complex system incidents
- Experience with Git-based software development workflows and CI/CD pipeline practices
Будет плюсом
- Experience designing, developing, or operating AI-SOC platforms or LLM-powered security automation solutions
- Experience building applications using LLM agent and workflow frameworks such as LangChain, LlamaIndex, or similar technologies
- Experience operating large-scale SOAR or workflow automation platforms with multiple production automation workflows
- Experience working with Kubernetes and EKS environments in production
- Experience extending or developing custom capabilities for security automation platforms
- Strong understanding of SIEM detection logic and security event lifecycle management
- Experience operating log processing pipelines, message queues, and related distributed infrastructure
- Experience building security operations dashboards and analytics solutions using data visualization tools
Условия
- Our compensation reflects the cost of living across several US geographic markets. At , your base pay is one part of your total compensation.
- The base pay for this position ranges from $152,000/year in our lowest geographic market to $169,000/year in our highest geographic market. Pay is based on several factors including market location and may vary depending on job-related knowledge, skills, and experience.
- Medical/Dental/Vision/Life, AD&D insurance
- Flexible Spending Accounts (FSA) & Health Savings Account (HSA)
- Long-term/Short-term Disability
- Employee Assistance Program (EAP) program
- 401K Plan with Company Match
- 18-21 days of the Paid Time Off (PTO) a year based on the tenure
- 12 Paid Holidays
- Paid Parental leave
- Pre-tax commuter benefits
- MTV - [Free] Electric Car Charging Station
- “Other Compensation” includes, but is not limited to, bonuses, equity, or other forms of compensation that would be offered to the hired applicant in addition to their established salary range or wage scale.
Как откликнуться
- Application Review - Phone Interview - Onsite (or Virtual Onsite) Interview – Offer
- The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.
- Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage.
Другое
- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
- We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did I ever live without ?” Born out of an obsession to make shopping, eating, and living easier than ever, we’re collectively disrupting the multi-billion-dollar e-commerce industry from the ground up. We are one of the fastest-growing e-commerce companies that established an unparalleled reputation for being a dominant and reliable force in South Korean commerce.
- We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurs surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At , you will see yourself, your colleagues, your team, and the company grow every day.
- Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join now to create an epic experience in this always-on, high-tech, and hyper-connected world. Role Overview
- The Detection Engineering (DE) team within ’s Digital Trust organization designs and operates end-to-end security threat detection and response automation systems. Our mission is to build an AI-powered Security Operations Center (AI-SOC) that enables faster, more accurate, and scalable security operations through intelligent automation. Working under a Detection-as-Code philosophy, we manage the entire detection lifecycle, including threat scenario development, log collection, detection engineering, automated response orchestration, and AI-driven threat analysis.
- As part of the Automation Engineering pillar, this role is responsible for designing, developing, and operating automated workflows that analyze, investigate, and respond to security threats at scale. The team builds and maintains integrations across a broad range of security platforms, develops AI Agent and LLM-based analysis capabilities for automated triage and investigation, and ensures the reliability, scalability, and operational excellence of critical security automation systems in production. This position offers the opportunity to shape the future of AI-driven security operations by building the technologies that power ’s next-generation AI-SOC platform.
- This job posting may be closed prior to the stated end date for application if all openings are filled.
- has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.
- Those eligible for employment protection (recipients of veteran’s benefits, the disabled, etc.) may receive preferential treatment for employment in accordance with applicable laws.