Remote Security Data Engineering and Automation Lead - REMOTE - Texas
Posted
This job is closed
This job post is closed and the position is probably filled. Please do not apply.
π€ Automatically closed by a robot after apply link
was detected as broken.
Description:
The Security Data Engineering and Automation Lead will work remotely from Houston, Texas.
This role involves designing, implementing, and maintaining a unified data model to support security operations.
The position focuses on data engineering, automation, and advanced detection strategies to address emerging threats.
Responsibilities include integrating security technologies, automating threat detection processes, and developing scalable data pipelines.
Collaboration with cross-functional teams, including security analysts, data scientists, and engineering teams, is essential for driving innovation and optimizing security workflows.
Key accountabilities include designing and maintaining a unified security data model, building a centralized security data lake, developing automation pipelines, implementing CI/CD pipelines, and enhancing SOC operations through SOAR functions.
The lead will work closely with stakeholders to refine detection engineering pipelines and automate repetitive security tasks, while also focusing on collaboration, documentation, and process standardization.
Requirements:
Proficiency in Python for automation, data integration, and pipeline development is required.
Strong experience with REST APIs to enable seamless security platform integrations is necessary.
Expertise in data engineering, including ETL processes and data pipeline orchestration tools, is essential.
Experience with CI/CD tools such as GitLab CI/CD, Jenkins, Azure DevOps, or GitHub Actions is required.
Familiarity with Infrastructure-as-Code (IaC) tools like Terraform, CloudFormation, or Ansible is needed.
Hands-on experience with containerization (Docker) and orchestration tools (Kubernetes) is required.
Strong knowledge of SIEM (Splunk, Sentinel) and EDR tools (CrowdStrike, SentinelOne) is essential.
Understanding of SOAR platforms (Cortex XSOAR, Siemplify) for automating security workflows is necessary.
Excellent project management and communication skills are required, with the ability to translate technical concepts for non-technical stakeholders.
The candidate must be highly organized, with a strong ability to document and standardize processes.
Preferred qualifications include experience with GitOps workflows for security automation, familiarity with detection engineering frameworks such as Sigma, YARA, or YARA-L, knowledge of static code analysis tools (SonarQube), and relevant certifications (AWS Certified DevOps Engineer, Azure DevOps Engineer Expert).
Benefits:
The position offers a competitive salary based on experience and qualifications.
There is remote work flexibility within a collaborative and supportive team environment.
Comprehensive healthcare coverage is provided, including medical, dental, and vision plans.
A 401(k) match with immediate vesting is included in the benefits package.
Professional development opportunities, including training and certifications, are available.
Paid time off and holidays are offered to support work-life balance.
Employees will have access to cutting-edge technology and the opportunity to work on innovative security solutions.