Senior Security Automation Engineer

Exol•Wilmington, MA

14d•$120,000 - $165,000•Hybrid

About The Position

Symbotic is seeking a Senior Security Automation Engineer to join their Security Automation team within the Information Security organization. This role involves designing and building AI-driven automations, internal applications, copilots, and agentic workflows to enhance the efficiency and security of Security, IT, GRC, and business teams. A key aspect of the role is developing safeguards for AI-driven actions to ensure they are safe, compliant, and trustworthy. This is a hands-on, high-autonomy engineering position where the individual will own projects end-to-end, from requirement shaping and architecture selection to development using modern AI tools, validation, and production delivery. The engineer will be part of a small, high-trust team, with their work being visible from the start. The initial project will support a compliance goal set by the CIO and VP of Security.

Requirements

Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, or a related technical field.
Minimum of 5 years of professional software engineering experience with genuine full-stack depth — client, server, and data/storage — and the DevOps skills (Docker, CI/CD, cloud) to run what you build.
Hands-on experience building with AI and LLM systems: LLM APIs, agent frameworks, RAG pipelines, prompt design, and AI-assisted development tools — including the judgment to review and validate AI-generated code before it ships.
Strong development skills, ideally Python, with API-driven integrations: REST APIs, webhooks, message queues, databases, and workflow orchestration platforms.
Experience building internal tools, automation workflows, or service integrations in enterprise environments.
Understanding secure system design: identity and access management, role-based access control, secrets management, and audit logging.
The autonomy to take an ambiguous business needs and deliver a working, documented, production system with minimal direction, plus strong communication skills across technical and non-technical teams.

Nice To Haves

Familiarity with enterprise security platforms: SIEM, SOAR, ITSM, IAM, GRC, vulnerability management, endpoint or cloud security.
Exposure compliance frameworks (ISO 27001, SOC 2) and control automation.
Interest or experience in penetration testing and red-team tooling.
TypeScript, Go, or Rust; PostgreSQL, SQLite, or BigQuery; infrastructure as code.

Responsibilities

Design, develop, and maintain AI-driven automations, internal applications, copilots, and workflow orchestration solutions that improve how Security, IT, GRC, and business teams operate.
Build agentic workflows that can retrieve context, reason through tasks, use approved tools, and generate actionable outputs.
Automate repetitive security, compliance, and operational processes — user access reviews, software approval workflows, compliance evidence collection — to reduce manual effort and accelerate response times.
Integrate AI and automation workflows with enterprise platforms such as ITSM, IAM, SIEM, SOAR, GRC, ticketing, knowledge management, vulnerability management, and cloud security tools.
Develop secure human-in-the-loop approval patterns for high-risk, sensitive, or business-critical AI-driven actions.
Create reusable workflow patterns, prompts, templates, and service components that can be adopted across teams.
Partner with stakeholders across Security, IT, Engineering, Compliance, and the business to identify high-value automation opportunities and translate needs into practical technical solutions.
Contribute to penetration-testing and red-team efforts as our offensive security program grows.
Measure and report outcomes such as time saved, error reduction, throughput improvement, and risk reduction.
Help define standards, governance, and guardrails for the secure, responsible, and compliant use of AI across the organization.