Security Automation Engineer

Zayo Group is a leading provider of mission-critical bandwidth solutions, and they are seeking a highly skilled Security Automation Engineer. This role involves designing, implementing, and optimizing security automation platforms and workflows to enhance operational efficiency and strengthen security response capabilities.

Responsibilities:

• Design, implement, and optimize enterprise security automation solutions supporting on-premises, cloud, and hybrid environments
• Architect scalable automation workflows utilizing SOAR platforms, APIs, scripting, and cloud-native technologies to improve security operations and operational resilience
• Lead evaluations, Proofs of Concept (POCs), and implementation of new automation platforms, integrations, and security technologies
• Develop automation standards, reusable frameworks, and best practices to support enterprise cybersecurity initiatives
• Collaborate with Security Operations, Infrastructure, Identity, Network, Cloud, and Application teams to deliver secure, scalable automation capabilities
• Design, develop, deploy, and maintain custom automation workflows, applications, integrations, and orchestration pipelines
• Build automation solutions that improve Vulnerability Management, Incident Response, Identity & Access Management (IAM), and other cybersecurity operational processes
• Develop API integrations between security tools, cloud platforms, and enterprise applications to streamline security workflows
• Automate repetitive operational tasks, security investigations, alert triage, and remediation activities to improve operational efficiency and reduce response times
• Troubleshoot complex automation workflows, integrations, and production issues while performing root cause analysis and implementing long-term improvements
• Monitor automation platform health, workflow performance, and operational effectiveness using enterprise monitoring and observability tools
• Participate in production support and critical incident response activities for security automation services
• Develop and maintain reusable automation frameworks, coding standards, configuration management processes, and operational procedures
• Establish automation metrics, dashboards, and Key Performance Indicators (KPIs) to measure the effectiveness and maturity of the cybersecurity program
• Ensure automation solutions align with organizational security policies, governance standards, and regulatory requirements
• Develop and maintain runbooks, playbooks, technical documentation, and operational standards supporting security automation platforms
• Evaluate emerging automation technologies, open-source solutions, and industry best practices to continuously improve operational capabilities
• Provide technical leadership and mentorship across security automation initiatives
• Lead technical discussions with Security Operations, Infrastructure, Identity, Cloud, Network, and Application teams to deliver integrated automation solutions
• Partner with engineering teams to identify automation opportunities that reduce operational overhead and improve service delivery
• Share knowledge through documentation, technical guidance, and cross-functional collaboration
• Drive continuous improvement initiatives focused on automation maturity, operational excellence, service reliability, and customer experience

Requirements:

• Minimum of five (5) years of experience in security automation, cybersecurity engineering, software engineering, or infrastructure automation
• Minimum of five (5) years of hands-on experience with Tines or enterprise SOAR platforms such as Torq, Splunk SOAR (Phantom), Cortex XSOAR, or similar technologies
• Experience designing, implementing, and supporting enterprise security automation solutions
• Strong experience developing automation using Python, PowerShell, JavaScript, or similar scripting languages
• Experience building and maintaining API integrations across security tools, cloud platforms, and enterprise applications
• Strong understanding of: Security Operations (SOC), Security Automation and Orchestration (SOAR), Vulnerability Management, Incident Response, Identity and Access Management (IAM/SSO), Cloud security concepts, REST APIs and integration frameworks, Software engineering and automation best practices
• Experience troubleshooting complex production issues and serving as a senior technical resource
• Familiarity with cloud platforms including AWS, Azure, or Google Cloud Platform
• Excellent analytical, troubleshooting, documentation, and communication skills
• Experience integrating enterprise security technologies including vulnerability management, SIEM, endpoint security, IAM, and cloud security platforms
• Experience with Infrastructure as Code (Terraform, CloudFormation, or similar) and CI/CD pipelines
• Familiarity with container technologies such as Docker and Kubernetes
• Experience working with SaaS platforms and cloud-native architectures
• Relevant industry certifications such as Security+, GSEC, GCSA, GCIH, CySA+, Azure Security Engineer, AWS Security Specialty, or equivalent
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related field (or equivalent experience)