Security Automation Engineer, Coalition

• 3+ years of experience in security engineering, with a strong focus on automation, ideally within an MDR or security operations environment
• Proficiency in at least one scripting language (e.g., Python, Go, PowerShell)
• Experience with cloud platforms (AWS, Azure, GCP) and their security services, particularly as they relate to monitoring and response
• Familiarity with security frameworks and standards (e.g., NIST, ISO 27001)
• Solid understanding of network security, operating system security, and application security principles
• Experience with security tools such as SIEM, SOAR, EDR, vulnerability scanners, and IDS/IPS – especially in an operational context
• Strong problem-solving skills and the ability to troubleshoot complex security issues under pressure
• Excellent communication and collaboration skills, essential for working with MDR analysts and incident responders

Desirable

• Coalition is on the hunt for a highly skilled and passionate Security Automation Engineer to join our growing Managed Detection and Response (MDR) service
• You'll be instrumental in designing, developing, and implementing automated security solutions that significantly streamline our MDR operations, enabling rapid and effective responses to emerging threats for our clients
• You'll work hand-in-glove with our Threat Analysts and engineering teams to improve our CI/CD pipelines, automate product deployments and integrations, and build self-healing infrastructure, all with an eye toward improving our MDR capabilities
• Design, develop, and maintain security automation tools and frameworks specifically to enhance MDR detection, prevention, and response capabilities
• Integrate security tools and processes into CI/CD pipelines, directly supporting the agility of our MDR service
• Develop and implement automated incident response playbooks and tools tailored for our MDR team to significantly reduce mean time to respond (MTTR) during active incidents
• Collaborate closely with engineering teams to promote secure coding practices and implement robust security controls within their applications and infrastructure, contributing to the overall resilience of our MDR offerings
• Research and evaluate new security technologies and automation opportunities, with a keen focus on how they can elevate our MDR service
• Create and maintain comprehensive documentation for all automated security processes and tools, ensuring clarity and consistency for the MDR team
• Occasionally interface with customers to understand their needs and allow that to inform MDR processes, procedures, and automations
• Participate in the MDR Threat Analyst on-call rotation as needed