Security Playbook Engineer, Sophos

• Proficiency in one or more scripting languages (Python, JavaScript, Bash) and familiarity with relevant SOAR platforms
• Hands-on experience integrating security solutions with SIEM/endpoint detection platforms
• Strong troubleshooting, debugging, and analytical skills, with proven ability to think outside the box
• Ability to convert documented requirements into actionable coding tasks in both independent and collaborative environments
• Solid understanding of cybersecurity operations principles and best practices
• Customer service-oriented with strong written and verbal communication skills
• Must thrive within a team environment as well as on an individual basis
• Natural curiosity and ability to learn new skills quickly
• Innovative mindset and driven to contribute to a team providing a best-in-class cybersecurity service
• 1+ years of experience working in a SOC environment or computer security team in an IT environment

Desirable

• The Managed Services Security Playbook Engineer will be responsible for converting automation opportunities and requirements into functional automated security playbooks and scripts
• Working closely with internal stakeholders, this role implements, tests, and maintains new security automation solutions, ensuring they are robust, secure, and delivers measurable efficiency improvements
• Leveraging proprietary and open-source tools and technologies, the Managed Services Security Playbook Engineer will deliver against unique and broad challenges facing the efficiency and effectiveness of the Sophos Managed Services Team
• Implement automation workflows and playbooks based on the requirements and use cases provided by internal managed services teams
• Use scripting languages (e.g., Python, JavaScript, Bash) to develop secure, scalable solutions
• Integrate newly developed automated workflows with existing security tools (SIEM, AV, endpoint detection, etc.)
• Conduct testing, validation, and troubleshooting to ensure reliable, stable deployment in production environments
• Continuously monitor and maintain implemented automation solutions, ensuring performance, reliability, and security
• Identify opportunities to optimize or refactor code for better efficiency, stability, or cost-effectiveness
• Document technical specifications, deployment procedures, and operational guidelines for each automated workflow
• Collaborate with the internal managed services teams to refine technical requirements and ensure solutions are in line with overall security objectives
• Provide support to operations teams, addressing any defects or issues in deployed workflows
• Work with cross-functional teams (Security Operations, DevOps, IT) to ensure smooth coordination, prompt development, and stable release cycles