Security Automation and Analytics Engineer - Cybersecurity

Deckers•Goleta, CA

3d•Remote

About The Position

At Deckers Brands, Together, Every Step is a promise kept that every employee can bring their authentic self, is valued and supported, as a whole person, at work and beyond. Together, Every Step is how we continue to deliver exceptional business results, experience an amazing place to work, and have a positive impact on the communities and world around us. The primary functions of this role, include but are not limited to: Identify and incorporate data sources to enhance cyber analytics tools. Integrate and automate services and operational tasks by consuming and building APIs, tools, and frameworks. Work with security telemetry tools, SIEM solutions, and other data metric reporting products to maintain an accurate and consolidated view of the security posture. Synthesize disparate data points to create comprehensive security insights. Establish predictive narratives to preemptively identify potential attacks. Enhance decision-making processes through clear and actionable information. Progress maturity of security analytics capabilities by researching new technologies, presenting advancements to the Information Security team, and developing data acquisition toolsets and frameworks. Provide metrics and reporting capabilities to assist in creation of quantitative security dashboards. Ensure Global Security Strategy meets security and privacy needs of internal and external customers. Focus on improving juncture of analysis and threat hunting. Develop Security Orchestration and Automation Response (SOAR) capabilities. Provide strategic and tactical security guidance. Facilitate the information security risk assessment process, including reporting and risk oversight. Communicate and promote awareness of information security, information risk, and privacy to business units, customers, and partners.

Requirements

Bachelor’s degree or equivalent in Computer Science, Information Technology, or related field of study. Employer will accept post-secondary academic coursework and/or relevant work experience which is evaluated as equivalent to a U.S. Bachelor’s degree in accordance with 8 CFR § 214.2(h)(4)(iii)(D) and 7 years of progressive experience with data analytics and automation in information security.
Current or prior security professional certifications: CISSP (Certified Information Systems Security Professional); CEH (Certified Ethical Hacker); AWS Solutions Architect; RHCSA (Red Hat Certificate Administrator); Splunk Architect.
7 years of experience with SIEM platforms, including log ingestion, tuning, dashboards, and correlation rules.
7 years of experience with SOAR tools to design, build, and optimize automation playbooks and workflows.
5 years of experience with Python coding to support automation, integrations, and data handling.
Leveraging API technologies to integrate tools, automate processes, and improve operational efficiency.
IP Address Management (IPAM) administration with automation and scalability.
Vulnerability management lifecycle, including remediation tracking, patching, and reporting.
Conducting penetration testing and applying results to improve defenses.
Hands-on AWS and Azure cloud security experience, including infrastructure protection and monitoring.
Developing dashboards, risk assessments, and analytics.

Responsibilities

Identify and incorporate data sources to enhance cyber analytics tools.
Integrate and automate services and operational tasks by consuming and building APIs, tools, and frameworks.
Work with security telemetry tools, SIEM solutions, and other data metric reporting products to maintain an accurate and consolidated view of the security posture.
Synthesize disparate data points to create comprehensive security insights.
Establish predictive narratives to preemptively identify potential attacks.
Enhance decision-making processes through clear and actionable information.
Progress maturity of security analytics capabilities by researching new technologies, presenting advancements to the Information Security team, and developing data acquisition toolsets and frameworks.
Provide metrics and reporting capabilities to assist in creation of quantitative security dashboards.
Ensure Global Security Strategy meets security and privacy needs of internal and external customers.
Focus on improving juncture of analysis and threat hunting.
Develop Security Orchestration and Automation Response (SOAR) capabilities.
Provide strategic and tactical security guidance.
Facilitate the information security risk assessment process, including reporting and risk oversight.
Communicate and promote awareness of information security, information risk, and privacy to business units, customers, and partners.