Information Security Engineer - DevSecOps

Williams-Sonoma • Rocklin, CA

9d • Onsite

About The Position

The Information Security Engineer - DevSecOps is a hands-on engineering role within Williams-Sonoma, Inc.’s Enterprise Cyber Security organization. The role designs, develops, deploys, and supports SOAR playbooks, workflow automations, platform integrations, and custom applications used by the Enterprise Cyber Security team. It has end-to-end responsibility for solution design, coding, testing, deployment, documentation, and production support, balancing SOAR development, security automation, and custom software development. The position works with operational teams to turn security requirements into dependable technical solutions.

The Security DevSecOps function partners with Security Operations, Incident Response, Threat Intelligence, Security Engineering, Identity & Access Management, and Infrastructure. Its mission is to reduce repetitive manual work, strengthen response capabilities, and deliver secure, maintainable software and automation that support associates, customers, and the business.

The role is based onsite in the Rocklin, California office Monday through Thursday and participates in an on-call rotation supporting production automations, integrations, and applications. The expected starting pay range is $90,000–$110,000. Relocation assistance is not available, and the employer does not sponsor employment-based immigration for this position.

Requirements

• At least 3 years of experience in information security engineering, software development, DevSecOps, security automation, or a related technical discipline.
• Bachelor’s degree in Computer Science or a related field, or equivalent work experience.
• Hands-on software development and scripting experience with Python and PowerShell, and working knowledge of REST APIs and JSON.
• Experience building, testing, and maintaining automation workflows, platform integrations, or custom applications in production environments.
• Working knowledge of SIEM, SOAR, endpoint security, identity, and threat intelligence concepts and operational workflows.
• Experience with Git-based source control, CI/CD practices, software testing, and secure development principles.
• Familiarity with Docker or containers and infrastructure-as-code tools such as Terraform.
• Strong analytical, troubleshooting, documentation, and communication skills, with the ability to work effectively across security and infrastructure teams.
• Willingness to participate in an on-call rotation for supported production services.

Nice To Haves

• Experience developing playbooks and integrations in Google SecOps SOAR or Palo Alto Cortex XSOAR.
• Hands-on experience integrating Google SecOps SIEM, CrowdStrike, Tanium, Ping Identity, Delinea, or MISP.
• Experience designing reusable automation frameworks, custom APIs, or internal security applications.
• Familiarity with incident response processes, detection engineering, and threat intelligence enrichment workflows.
• Experience with AI-assisted software development or agentic AI workflows, including appropriate testing, oversight, and security controls.
• Experience supporting hybrid on-premises and cloud infrastructure in a large enterprise environment.

Responsibilities

• Design, develop, test, deploy, and maintain SOAR playbooks and response workflows in Google SecOps SOAR and Palo Alto Cortex XSOAR.
• Build custom security applications, reusable services, scripts, and workflow automations to improve investigation, enrichment, triage, and response processes.
• Develop and maintain secure integrations using REST APIs, JSON, webhooks, and platform SDKs across Google SecOps SIEM, CrowdStrike, Tanium, Ping Identity, Delinea, MISP, and other enterprise systems.
• Own the software development lifecycle, including requirements analysis, solution design, source control, testing, release management, documentation, and ongoing production maintenance.
• Use Python and PowerShell to automate repeatable security operations tasks, and use Git and CI/CD practices for versioning, code review, and controlled releases.
• Use Docker and container-based development practices, and Terraform or other infrastructure-as-code approaches where appropriate for repeatable deployments.
• Partner with SOC, Incident Response, Threat Intelligence, Security Engineering, IAM, and Infrastructure teams to identify automation opportunities and translate operational needs into technical requirements.
• Troubleshoot failed playbooks, API integrations, custom applications, and production workflows; conduct root-cause analysis and implement durable fixes.
• Build safeguards into automations, including least-privilege access, credential protection, audit logging, error handling, testing, approval gates, and rollback procedures for disruptive actions.
• Participate in an on-call rotation supporting production SOAR automations, integrations, and custom security applications.
• Evaluate AI-assisted development and agentic automation opportunities, applying human review, security controls, and validation before production adoption.
• Maintain technical documentation, runbooks, and knowledge-transfer materials to support reliable operations and cross-team collaboration.

Benefits

• A generous discount on all WSI brands.
• A 401(k) plan and other investment opportunities.
• Paid vacations, holidays, and time off to volunteer.
• Health benefits, including dental and vision insurance and same-sex domestic partner benefits.
• Tax-free commuter benefits.
• A wellness program supporting physical, financial, and emotional health.
• In-person and online learning opportunities through WSI University.
• Cross-brand and cross-function career opportunities.
• Resources for self-development.
• Advisor (Mentor) program.
• Career development workshops, learning programs, and speaker series.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level