Sr Cyber Security Automation Engineer

JLL • Richmond, VA

1d • $150,000 - $190,000 • Remote

About The Position

JLL Technologies is seeking a Senior Cyber Security Automation Engineer to design and develop security automations involving SOAR and AI. This hands-on role requires programming, API, and integration expertise and the ability to work in a technically complex, fast-changing, and diverse environment. The engineer will partner with security functions to build and maintain automation playbooks across their full lifecycle, identify and deliver automation opportunities, and use large language models to improve security analysts’ incident-resolution capabilities. The position is remote and based in Richmond, Virginia. Candidates must be authorized to work in the United States without visa sponsorship.

Expected compensation is $150,000–$190,000 USD per year. Final compensation depends on factors including qualifications, location, market conditions, and internal considerations.

Requirements

• Bachelor’s or master’s degree in Information and Computer Science, Statistics, or a quantitative science discipline.
• Demonstrated experience developing automation solutions for cybersecurity.
• At least 5 years of Information Technology experience.
• At least 4 years of cybersecurity experience.
• At least 2 years of experience with a SOAR tool, such as Splunk SOAR, Sentinel, or Swimlane.
• At least 4 years of Python development experience.
• Strong Python background.
• Working knowledge of Bash and PowerShell scripting.
• Experience with REST and other third-party API integrations.
• Demonstrated experience building solutions using OpenAI or other large language models.
• Knowledge of software development best practices, including coding standards, code reviews, and testing methodologies.
• Strong understanding of IT security concepts and practices, with demonstrated experience automating information security practices and workflows.
• Proficiency with GitHub for version control, collaboration, and code repository management.
• Familiarity with continuous integration and continuous deployment practices.
• Experience with CI/CD tools such as GitHub Actions to automate build, test, and deployment processes.
• Familiarity with infrastructure-as-code tools such as Terraform or CloudFormation.
• Strong verbal communication and concise written communication skills.
• Strong organizational, multitasking, and time-management skills.

Nice To Haves

• Preference for working in an agile team environment.

Responsibilities

• Partner with SOC, Insider Risk, DLP, Red Team, Threat Intelligence, and other security functions to design, deliver, and maintain efficient, reusable, and reliable security automations.
• Manage automation playbooks through their full lifecycle, including requirements gathering, planning, design, testing, implementation, and maintenance.
• Lead initiatives to identify security automation opportunities, gain internal stakeholder support, deploy solutions, and measure efficiency gains.
• Use large language models, including OpenAI and Hugging Face, to identify use cases that improve analysts’ ability to resolve incidents and automate actions where possible.
• Work with the detection team to build end-to-end solutions with automated feedback loops that tune detections, enrich data, and support complex detections.
• Expand the team’s automation capabilities to support all security functions.
• Perform quality checks on automations to reduce errors and promote continuous improvement.
• Advocate for standardization where appropriate.

Benefits

• 401(k) plan with matching company contributions.
• Comprehensive medical, dental, and vision care.
• Paid parental leave at 100% of salary.
• Paid time off and company holidays.
• Early access to earned wages through Daily Pay.
• Competitive pay and a comprehensive benefits package supporting personal well-being and growth.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior