Security Automation Engineer (Intermediate)

Job classification

Requisition IDs: 143364

Location: Cape Town / Johannesburg

Career stream

Information Security

Leadership pipeline

Manage Self: Technical

Job purpose

We are seeking a highly skilled Security Automation Engineer with a strong background in security and proficiency in Python. The ideal candidate will have experience with Security Orchestration, Automation, and Response (SOAR) platforms. This role is responsible for designing, implementing, and maintaining security automation solutions to enhance our security operations. 

Job responsibilities

•    Design, develop, and maintain security automation scripts and tools using Python. 
•    Integrate security tools and systems with SOAR platforms to automate incident response and threat detection processes. 
•    Collaborate with security analysts and incident responders to identify automation opportunities and improve security workflows. 
•    Develop and maintain documentation for security automation processes and tools. 
•    Collaborate with IT, compliance, and development teams to ensure automation aligns with business objectives and regulatory requirements. 
•    Stay up-to-date with the latest security trends, tools, and technologies to continuously improve security automation capabilities. 

Required skills and experience

• Python Programming: proficient in writing clean, modular, and reusable code for automation and integration tasks.
• Excellent problem-solving and analytical skills.
• Strong communication and collaboration skills.
• Automation mindset: ability to identify repetitive tasks and design scalable solutions.
• System integration and development of larger projects.
• Experience in designing and developing programs that integrate multiple technologies.

Essential qualifications - NQF Level

Desirable (not required)

• Experience with SOAR platforms (e.g., Cortex XSOAR, Splunk SOAR, Swimlane, etc.). 
• Familiarity with SIEM technologies such as Elastic Stack or others. 
• Knowledge of data handling techniques including ingestion, parsing, and transformation. 
• Exposure to data modelling concepts and how structured data supports security analytics. 
• Explore and integrate AI/ML capabilities to enhance automation workflows and threat detection. 
• Solid understanding of security principles, practices, and technologies:  Understanding of SOC workflows, incident response, and threat detection. 
• Experience integrating with APIs and third-party security tools. 

Minimum experience level

• 5 years of experience in Information Security or related field

Technical / Professional knowledge

Behavioural competencies