Information Security Engineer - DevSecOps

Williams-Sonoma•Rocklin, CA

9d•$90,000 - $110,000•Onsite

About The Position

As an Information Security Engineer - DevSecOps, you will design, develop, deploy, and support SOAR playbooks, workflow automations, platform integrations, and custom applications used by the Enterprise Cyber Security team. This hands-on engineering role has end-to-end responsibility for solution design, coding, testing, deployment, documentation, and production support. You will balance SOAR development, security automation, and custom software development while working with operational teams to translate security requirements into dependable technical solutions. The role is part of the Enterprise Cyber Security organization at Williams-Sonoma, Inc. The Security DevSecOps function partners with Security Operations, Incident Response, Threat Intelligence, Security Engineering, Identity & Access Management, and Infrastructure to build software and integrations that improve enterprise security operations. The team aims to reduce repetitive manual work, strengthen response capabilities, and deliver secure, maintainable software and automation. The position requires onsite work at the Rocklin, California office Monday through Thursday and participation in an on-call rotation supporting production SOAR automations, integrations, and custom security applications. The expected starting pay range is $90,000–$110,000. Relocation assistance is not available, and the company will not sponsor employment-based immigration for this position.

Requirements

At least 3 years of experience in information security engineering, software development, DevSecOps, security automation, or a related technical discipline.
Bachelor's degree in Computer Science or a related field, or equivalent work experience.
Hands-on software development and scripting experience using Python and PowerShell, with working knowledge of REST APIs and JSON.
Experience building, testing, and maintaining automation workflows, platform integrations, or custom applications in production environments.
Working knowledge of SIEM, SOAR, endpoint security, identity, and threat intelligence concepts and operational workflows.
Experience with Git-based source control, CI/CD practices, software testing, and secure development principles.
Familiarity with Docker or containers and infrastructure-as-code tools such as Terraform.
Strong analytical, troubleshooting, documentation, and communication skills, and ability to work effectively across security and infrastructure teams.
Willingness to participate in an on-call rotation for supported production services.
Must work onsite in the Rocklin, CA office Monday through Thursday.

Nice To Haves

Experience developing playbooks and integrations in Google SecOps SOAR or Palo Alto Cortex XSOAR.
Hands-on experience integrating Google SecOps SIEM, CrowdStrike, Tanium, Ping Identity, Delinea, or MISP.
Experience designing reusable automation frameworks, custom APIs, or internal security applications.
Familiarity with incident response processes, detection engineering, and threat intelligence enrichment workflows.
Experience with AI-assisted software development or agentic AI workflows, including appropriate testing, oversight, and security controls.
Experience supporting hybrid on-premises and cloud infrastructure in a large enterprise environment.

Responsibilities

Design, develop, test, deploy, and maintain SOAR playbooks and response workflows in Google SecOps SOAR and Palo Alto Cortex XSOAR.
Build custom security applications, reusable services, scripts, and workflow automations to improve investigation, enrichment, triage, and response processes.
Develop and maintain secure integrations using REST APIs, JSON, webhooks, and platform SDKs across Google SecOps SIEM, CrowdStrike, Tanium, Ping Identity, Delinea, MISP, and other enterprise systems.
Own the full software development lifecycle, including requirements analysis, solution design, source control, testing, release management, documentation, and ongoing production maintenance.
Use Python and PowerShell to automate repeatable security operations tasks; use Git and CI/CD practices for versioning, code review, and controlled releases.
Use Docker and container-based development practices, and Terraform or other infrastructure-as-code approaches where appropriate for repeatable deployments.
Partner with SOC, Incident Response, Threat Intelligence, Security Engineering, IAM, and Infrastructure teams to identify automation opportunities and translate operational needs into technical requirements.
Troubleshoot failed playbooks, API integrations, custom applications, and production workflows; conduct root-cause analysis and implement durable fixes.
Build safeguards into automations, including least-privilege access, credential protection, audit logging, error handling, testing, approval gates, and rollback procedures for disruptive actions.
Participate in an on-call rotation supporting production SOAR automations, integrations, and custom security applications.
Evaluate AI-assisted development and agentic automation opportunities, applying human review, security controls, and validation before production adoption.
Maintain technical documentation, runbooks, and knowledge-transfer materials to support reliable operations and cross-team collaboration.

Benefits

A generous discount on all WSI brands.
A 401(k) plan and other investment opportunities.
Paid vacations, holidays, and time off to volunteer.
Health benefits, dental and vision insurance, including same-sex domestic partner benefits.
Tax-free commuter benefits.
A wellness program supporting physical, financial, and emotional health.
In-person and online learning opportunities through WSI University.
Cross-brand and cross-function career opportunities.
Resources for self-development.
Advisor (Mentor) program.
Career development workshops, learning programs, and speaker series.
Compensation may include benefits, paid time off, merit, and bonus opportunities.