Security Automation Engineer

Jackson National Life Insurance•Lansing, MI

About The Position

The Security Automation Engineer will be responsible for designing and developing software/systems to support the Security tools used in the Information Security Department. The Security Automation Engineer will play a key role in designing, developing, and implementing threat detection and vulnerability management-related systems, processes and addressing automation needs. The Engineer will help to develop technical solutions to decrease response times by automating repeatable tasks.

Requirements

Experience with the use and architectural aspects of a SIEM.
Working knowledge of Software Configuration Management (SCM) and the tools that support it.
Understanding of networking technologies and protocols that make up an enterprise environment.
Experience deploying and managing cloud-based infrastructure.
In-depth understanding of software engineering principles.
Ability to work independently and collaborate with a team.
Able to work within established configuration and change management policies to ensure awareness, approval, and success of modifications to the environment.
Excellent communication skills and ability to communicate effectively with technical and non-technical staff.
Development experience with Python and PowerShell.
Working knowledge of application development concepts, including REST APIs, Java, XML and SQL.
Working knowledge of Sailpoint IdentityIQ or equivalent IAM platforms, including identity lifecycle management, access certifications, workflow configuration, application integration, automated provisioning, and related configuration or development concepts.
Knowledge of enterprise authentication protocols and their related authorization methods.
Familiar with the concepts of continuous integration and development (CICD) pipelines
Detail-oriented with strong analytical skills.
Working knowledge of productivity, collaboration, cloud-based technologies, and automation platforms used to support workflow execution and process automation.
Experienced user of Microsoft Office Suite and orchestration libraries.
Experience in completing technical documentation.
Technical aptitude for troubleshooting inefficiencies with operation/production activities.
Familiar with Agile methodologies.
Familiar with common computing platforms including Windows, Linux, and Mainframe.
Bachelor's Degree and/or equivalent experience required.
5+ years of Information Technology experience required.
5+ years of experience developing scripts or automation required.
5+ years of Information Security specific experience or equivalent experience required.

Nice To Haves

CISSP Certified Information Systems Security Professional or other equivalent certifications preferred.

Responsibilities

Administers security-focused information systems, such as identity management, data loss prevention, SIEM, PKI, and eDiscovery/forensics.
Identifies, assesses, and communicates risks relating to data, systems, and personnel and provides guidance on changes to reduce risk.
Reviews violations of computer security procedures and provides guidance to end users to ensure violations are not repeated.
Provides direction for automation Security strategy by working with management to ensure appropriate security coverage and mitigate risks.
Participates in the evaluation and testing of security software and recommends automation strategy.
Provides direction on best practices for automation and orchestration.
Participates in forensic investigations and resolves automation problems as needed.
Affects responses to Audit findings and helps provide automation solutions.
Provides guidance and ensures alignment of software engineering best practices and principles within the group.
Responsible for enforcing company policies and procedures.
Performs other duties and/or projects as assigned.
Provides after hours call assistance as needed.