Security Automation and Analytics Engineer - Cybersecurity

Deckers Brands is a company committed to diversity and inclusion, aiming to create an exceptional workplace for its employees. They are seeking a Security Automation and Analytics Engineer to enhance their cybersecurity posture through data analytics, automation, and strategic security guidance.

Responsibilities:

• Identify and incorporate data sources to enhance cyber analytics tools
• Integrate and automate services and operational tasks by consuming and building APIs, tools, and frameworks
• Work with security telemetry tools, SIEM solutions, and other data metric reporting products to maintain an accurate and consolidated view of the security posture
• Synthesize disparate data points to create comprehensive security insights
• Establish predictive narratives to preemptively identify potential attacks
• Enhance decision-making processes through clear and actionable information
• Progress maturity of security analytics capabilities by researching new technologies, presenting advancements to the Information Security team, and developing data acquisition toolsets and frameworks
• Provide metrics and reporting capabilities to assist in creation of quantitative security dashboards
• Ensure Global Security Strategy meets security and privacy needs of internal and external customers
• Focus on improving juncture of analysis and threat hunting
• Develop Security Orchestration and Automation Response (SOAR) capabilities
• Provide strategic and tactical security guidance
• Facilitate the information security risk assessment process, including reporting and risk oversight
• Communicate and promote awareness of information security, information risk, and privacy to business units, customers, and partners

Requirements:

• Bachelor's degree or equivalent in Computer Science, Information Technology, or related field of study
• 7 years of progressive experience with data analytics and automation in information security
• Current or prior security professional certifications: CISSP (Certified Information Systems Security Professional); CEH (Certified Ethical Hacker); AWS Solutions Architect; RHCSA (Red Hat Certificate Administrator); Splunk Architect
• 7 years of experience with SIEM platforms, including log ingestion, tuning, dashboards, and correlation rules
• 7 years of experience with SOAR tools to design, build, and optimize automation playbooks and workflows
• 5 years of experience with Python coding to support automation, integrations, and data handling
• Leveraging API technologies to integrate tools, automate processes, and improve operational efficiency
• IP Address Management (IPAM) administration with automation and scalability
• Vulnerability management lifecycle, including remediation tracking, patching, and reporting
• Conducting penetration testing and applying results to improve defenses
• Hands-on AWS and Azure cloud security experience, including infrastructure protection and monitoring
• Developing dashboards, risk assessments, and analytics