AWS DevOps SME

About the role

We are seeking a Security Automation Engineer with strong expertise in Python development, security automation, DevSecOps practices, and SIEM/SOAR platforms. The ideal candidate will be responsible for building automated security workflows, enhancing threat detection capabilities, integrating security tools, and improving Security Operations Centre (SOC) efficiency through automation and orchestration.

What you’ll be doing

• Design and develop security automation solutions using Python.
• Develop and maintain SOAR playbooks and automated incident response workflows.
• Integrate security tools, threat intelligence feeds, and operational platforms through APIs.
• Build and optimise SIEM use cases, detection rules, dashboards, and alerting mechanisms.
• Implement DevSecOps practices within software delivery and security operations processes.
• Automate repetitive security, compliance, and operational tasks to reduce manual effort.
• Collaborate with SOC analysts, Security Engineers, Platform Teams, and Development Teams.
• Enhance threat detection, incident response, and security monitoring capabilities

Essential Skills / Experience

• Strong hands-on experience in Python development and automation.
• Good understanding of DevSecOps principles and Secure Software Development Lifecycle (SSDLC).
• Experience with SIEM platforms such as Splunk, Elastic, Sentinel, QRadar, ArcSight, LogRhythm, or similar.\
• Experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, Microsoft Sentinel Automation, Swimlane, or similar.
• Experience integrating systems through REST APIs, webhooks, and automation frameworks.
• Experience with scripting, workflow automation, and orchestration.
• Strong understanding of cybersecurity concepts including:
  • Incident Response
  • Threat Detection
  • Vulnerability Management
  • Security Monitoring
  • Threat Intelligence

Preferred Skills

• Experience with cloud security monitoring in AWS, Azure, or GCP.
• Knowledge of container security, Kubernetes, and CI/CD security controls.
• Familiarity with Detection Engineering and MITRE ATT&CK framework.
• Exposure to AI/ML-based threat detection or security automation solutions.
• Experience with Infrastructure as Code (Terraform, Ansible, CloudFormation).

Desired Candidate Profile

• Strong automation-first mindset.
• Passion for solving operational challenges through engineering.
• Ability to translate security requirements into automated workflows.
• Strong analytical, troubleshooting, and problem-solving capabilities.
• Excellent stakeholder engagement and communication skills.