Security Automation Engineer

Foresite•Overland Park, KS

15h

About The Position

Foresite is seeking a highly motivated and passionate Security Automation Engineer with a strong foundation in cybersecurity and robust Python development skills to join our growing team. In this critical internal role, you will be instrumental in supporting and enhancing Foresite's proprietary security products, including our SOAR-powered ecosystem. This is a non-client-facing role. Your primary customer will be our internal Security Operations Center (SOC), and your work will directly empower them to triage, investigate, and respond to threats more effectively. If you are an exceptional problem solver who thrives on building robust automation, writing clean code, and working behind the scenes to optimize security operations, we encourage you to apply! Note: While experience with Google SecOps SOAR is highly valued, we are fully prepared to train a strong Cybersecurity and Python specialist who has a passion and willingness to master the platform.

Requirements

3-5 years of experience in security engineering or security operations, combined with a strong background in Python development.
Highly proficient in working with RESTful APIs, parsing complex JSON structures, and securely transmitting data across diverse platforms.
Demonstrated experience with GitHub (branching, merging, pull requests) and working directly with SQL or NoSQL databases.
If you don't already have experience with Google SecOps SOAR (formerly Siemplify) or other major SOAR platforms, you have an active eagerness and aptitude to learn and master it quickly.
Strong interpersonal and communication skills to work closely with SOC analysts, understand their pain points, and translate operational needs into technical requirements.

Nice To Haves

Experience with Google SecOps SOAR is highly valued.

Responsibilities

Write, optimize, and maintain robust Python scripts to build custom RESTful API integrations, automate repetitive workflows, and orchestrate security tool actions.
Design and maintain databases (SQL/NoSQL) to store, retrieve, and transition threat intelligence and alert data seamlessly within automated security workflows.
Leverage Git and GitHub best practices to manage code repositories, review team playbooks, and maintain structured version control for all scripts and configurations.
Design, build, and troubleshoot automation playbooks within Google SecOps SOAR to support Foresite's proprietary tools and streamline analyst workflows.
Serve as the primary technical resource for our SOC analysts. Troubleshoot playbook failures, optimize ingestion pipelines, and act as a reliable partner in resolving engineering issues.
Collaborate with internal security engineering leadership to analyze bottleneck processes and implement automated solutions that dramatically decrease mean-time-to-detection (MTTD) and response (MTTR).
Create and maintain comprehensive internal documentation for custom integrations, database schemas, and playbook logic to support team cross-training and ongoing maintenance.