Cyber Automation Engineer, Lead

Booz Allen Hamilton•Washington, DC

8d•$86,800 - $198,000•Onsite

About The Position

Join our team as a Lead Cyber Automation Engineer and take the lead in designing and implementing automated workflows that accelerate and strengthen cyber defense operations. You’ll build scalable, API-driven integrations, automate detection and response processes, reduce manual workload, and enable smarter decision-making across cyber functions. In this role, you’ll architect automation pipelines, enhance detection logic, integrate data sources, and drive continuous improvement of our cybersecurity tooling and processes. Your work will directly shape a modern, efficient, automation‑first security environment. Join us. The world can’t wait.

Requirements

5+ years of experience in cyber automation engineering or security automation development
Experience designing automated workflows that enhance cyber detection, response, and operational efficiency
Experience with endpoint, network, or cloud security technologies such as Microsoft Defender, Forescout, and McAfee
Experience with scripting languages and automation frameworks such as Python, PowerShell, API integration, and CI/CD pipelines
Experience integrating data sources, building automation pipelines, or improving security effectiveness measurement
Experience with AWS tools such as CodeCommit and automated deployment practices
Knowledge of cybersecurity concepts including network security, information assurance, and security operations
TS/SCI clearance
Bachelor’s degree

Nice To Haves

Experience with detection engineering technologies such as Splunk, Cribl, and Sigma rules
Experience with cloud automation, infrastructure-as-code such as Terraform, or containerization such as Docker and Kubernetes
Experience working in hybrid delivery environments
Knowledge of SOAR platforms or security automation orchestration tools
Possession of strong analytical, communication, and cross-team collaboration skills
CompTIA Security+ or CISSP Certification

Responsibilities

Designing and implementing automated workflows that accelerate and strengthen cyber defense operations
Building scalable, API-driven integrations
Automating detection and response processes
Reducing manual workload
Enabling smarter decision-making across cyber functions
Architecting automation pipelines
Enhancing detection logic
Integrating data sources
Driving continuous improvement of cybersecurity tooling and processes