About the job
About the Role
IntraEdge Technology is on the lookout for a talented Cybersecurity Automation Engineer to join our team, focusing on a client within the financial sector. This position is integral to advancing our capabilities in cyber data analytics and automation, ensuring the security of enterprise data, infrastructure, and customer trust in a cloud-first, consumer-centric environment.
The successful candidate will possess extensive technical knowledge in automation, SIEM/SOAR, data pipelines, and AI/ML integration. You will collaborate with various teams, including IT Architecture, Engineering, DevOps, Security Operations, and business leadership, to drive our cybersecurity initiatives forward.
Key Responsibilities
- Design and implement cutting-edge cybersecurity architectures, automation tools, and scalable analytics solutions.
- Develop, deploy, and maintain automation strategies that enhance security operations and incident response workflows.
- Create advanced Splunk dashboards, queries, and visualizations to facilitate threat detection and forensic investigations.
- Lead the implementation and optimization of SIEM platforms (e.g., Splunk) to improve threat detection and alert accuracy.
- Develop and manage SOAR playbooks to automate incident response and remediation processes.
- Continuously enhance SOAR integrations across security and IT tools.
- Design, train, and deploy AI/ML models for threat prediction, anomaly detection, and behavioral analytics.
- Incorporate ML insights into SIEM/SOAR pipelines to support analyst decision-making.
- Build and maintain scalable ETL pipelines for security data ingestion, enrichment, and retention.
- Ensure data integrity, quality, and consistency across various data sources and pipelines.
- Optimize data workflows for performance, reliability, and scalability in cloud and hybrid environments.
- Conduct thorough analyses of complex incidents, correlating logs and threat intelligence to identify root causes and impacts.
- Stay updated on emerging cybersecurity technologies, automation tools, and threat trends to foster innovation.
Required Qualifications
- 4+ years of experience in cybersecurity engineering, with in-depth knowledge of Splunk, SIEM, SOAR, ML, and automated data pipelines.
- 3+ years of experience with security automation platforms (SOAR) such as Splunk SOAR, XSOAR, Swimlane, etc.
- 3+ years of experience in cyber data engineering or analytics, including log processing and data pipeline management.