Designs and maintains scalable cybersecurity automation components, integrations, connectors, and playbooks for SOC workflows, incident response, threat investigation, and alert triage. Integrates SIEM, SOAR, EDR, vulnerability management, and threat intelligence platforms. Develops AI- and LLM-powered security workflows, converts customer requirements and proof-of-concepts into production solutions, and applies software engineering practices including testing, documentation, version control, and performance optimization.
This role is for one of Weekday’s clients
Salary range: Rs 1200000 - Rs 4500000 (ie INR 12 - 45 LPA)
Min Experience: 7+ years
Location: Remote (India)
JobType: full-time
We are looking for a Senior Security Engineer with strong expertise in security automation, cybersecurity engineering, and AI-driven workflows. The ideal candidate will design, develop, and maintain scalable security automation solutions that streamline Security Operations Center (SOC) workflows, improve incident response, and enhance operational efficiency.
In this role, you will build reusable security automation components, integrations, connectors, and playbooks that work across security platforms, including SIEM, SOAR, EDR, vulnerability management, and threat intelligence solutions. You will also explore the integration of Artificial Intelligence (AI) and Large Language Models (LLMs) into security automation to enable intelligent decision-making and more effective security operations.
The role requires strong programming skills, a solid understanding of the cybersecurity ecosystem, and the ability to transform customer use cases and proof-of-concepts into reliable, production-grade solutions.
RequirementsKey Responsibilities1. Security Automation Development
- Design, develop, and maintain reusable security automation components, connectors, integrations, and playbooks.
- Build scalable automation solutions to streamline SOC workflows, incident response, threat investigation, and other security operations.
- Translate customer requirements, real-world use cases, and proof-of-concepts into production-ready security automation content.
- Develop modular, reliable, and maintainable automation frameworks that can be deployed across diverse customer environments.
- Optimise automation workflows for performance, scalability, reliability, and ease of deployment.
- Build integrations with SIEM, SOAR, Endpoint Detection and Response (EDR), vulnerability management, and threat intelligence platforms.
- Develop connectors that enable seamless communication and data exchange between security tools.
- Automate repetitive security tasks, alert enrichment, incident triage, investigation, and response workflows.
- Ensure integrations are robust, efficient, and compatible with different security environments.
- Troubleshoot integration issues and continuously improve the reliability of automation components.
- Integrate AI and LLM capabilities into security automation workflows to support intelligent analysis and decision-making.
- Explore agentic workflows, AI-powered investigation, and automated response capabilities for security operations.
- Develop automation frameworks that combine traditional rule-based workflows with AI-driven reasoning where appropriate.
- Evaluate AI-enabled approaches for improving alert analysis, threat investigation, and operational efficiency.
- Apply suitable validation and safeguards to ensure AI-powered workflows are reliable and secure.
- Maintain and continuously enhance the security automation content library used by customers globally.
- Apply software engineering best practices, including code reviews, testing, documentation, version control, and performance optimisation.
- Ensure automation components are reusable, scalable, maintainable, and production-ready.
- Identify opportunities to improve deployment speed, operational consistency, and the overall usability of security solutions.
- Diagnose technical issues and implement long-term solutions to prevent recurring problems.
- Collaborate with Sales Engineering, Professional Services, and Product teams to understand customer requirements and improve solution delivery.
- Support technical proof-of-concepts and help convert customer-specific requirements into reusable automation capabilities.
- Work with stakeholders to troubleshoot deployment challenges and enhance the customer experience.
- Incorporate customer feedback into automation development and product improvements.
- Contribute technical insights and recommendations to strengthen security automation capabilities.
- Python Programming: Strong programming skills in Python for developing automation components, integrations, and security workflows.
- SOAR: Practical understanding of Security Orchestration, Automation, and Response platforms, including the development and implementation of automation workflows.
- Playbook Development: Experience designing and building security playbooks for incident response, investigation, alert triage, and operational automation.
- Cybersecurity Fundamentals: Understanding of security operations, threat detection, incident response, and security tooling.
- Problem-Solving: Strong analytical skills and the ability to design efficient, scalable solutions for complex security challenges.
- Software Engineering: Understanding of algorithms, data structures, testing, maintainable code, and performance optimisation.
- SIEM: Experience with Security Information and Event Management platforms, security event analysis, alert management, and detection workflows.
- Experience integrating EDR, vulnerability management, and threat intelligence platforms.
- Familiarity with SOC operations, incident response, and threat engineering.
- Knowledge of JavaScript for automation and integration development.
- Understanding of Generative AI, LLMs, agentic workflows, and AI-powered automation frameworks.
- Experience developing reusable security content for multiple customer environments.
- Familiarity with REST APIs, webhooks, authentication mechanisms, and third-party integrations.
- Demonstrated experience in security engineering, security automation, cybersecurity software development, or a related technical field.
- Strong hands-on programming experience in Python or JavaScript.
- Experience developing security automation solutions, integrations, or SOC playbooks.
- Practical understanding of security platforms such as SIEM, SOAR, EDR, vulnerability management, and threat intelligence tools.
- Ability to transform customer requirements and technical concepts into production-grade automation solutions.
- Understanding of AI/LLM concepts and their application to security workflows.
- Strong ownership, troubleshooting, and collaboration skills.
- Ability to work effectively in a fast-paced, product-focused engineering environment.
Similar Jobs
Marketing Tech • Analytics
Monitor, investigate, and respond to security alerts and incidents as part of a Security Operations Center. Manage endpoint protection, vulnerability scanning, remediation, security audits, and compliance activities. Use SIEM, EDR, antivirus, firewalls, and other security tools to detect and mitigate threats. Contribute to security policies, processes, tool improvements, risk assessments, and trend analysis while collaborating with IT, security, compliance, audit, and governance teams.
Top Skills:
AntivirusCloud SecurityCrowdstrike EdrData Loss Prevention (Dlp)Endpoint Detection And Response (Edr)Exabeam SiemFirewallsIntrusion Detection Systems (Ids)Security Information And Event Management (Siem)Tcp/IpTenable NessusTrendmicro Deep SecurityVulnerability Scanning
Cloud • Security • Software • Cybersecurity
Investigates complex cyberattacks, develops and monitors scalable detection code, triages critical incidents, analyzes AI-generated detections, applies threat intelligence, and provides advanced customer-facing security support. The role partners with research and global engineering teams to automate defenses, improve detection coverage, and deliver customer-specific security solutions.
Top Skills:
Ai And Machine LearningAPIsCloud-Native ArchitecturesMitre Att&CkNetwork ProtocolsPythonSecurity Data PipelinesSocXdr
Healthtech
Leads enterprise application security and secure SDLC initiatives, embedding vulnerability scanning, security gates, security-as-code, and AI security controls across CI/CD pipelines. Oversees vulnerability triage, remediation SLAs, threat modeling, secure code reviews, developer enablement, security metrics, toolchain automation, software supply chain security, and AI governance. Partners with engineering, architecture, delivery enablement, and risk teams to establish secure development standards and reduce application and AI-related security risks.
Top Skills:
Api Security TestingBashClaude CodeContainer ScanningCursorCyclonedxDastData Loss PreventionDependency ScanningDigital Rights ManagementDockerEmail FilteringEncryptionEndpoint ProtectionFirewallsGithub ActionsGithub CopilotGitlab Ci/CdGitlab DuoGitlab UltimateGoIntrusion Prevention SystemsJenkinsJfrog CurationJfrog XrayKubernetesMcpOwasp Dependency-CheckPythonSastScaSecret DetectionSecurity Information And Event ManagementSharepointSpdxVirtualization PlatformsWeb FilteringWindows Server
What you need to know about the Pune Tech Scene
Once a far-out concept, AI is now a tangible force reshaping industries and economies worldwide. While its adoption will automate some roles, AI has created more jobs than it has displaced, with an expected 97 million new roles to be created in the coming years. This is especially true in cities like Pune, which is emerging as a hub for companies eager to leverage this technology to develop solutions that simplify and improve lives in sectors such as education, healthcare, finance, e-commerce and more.
