Sr Cyber Security Automation Engineer

JLL is hiring a Senior Cyber Security Automation Engineer to design and develop security automations involving SOAR and AI. The role owns automation playbooks throughout their lifecycle, identifies automation opportunities, and works across security functions to improve incident response, detections, and operational efficiency.

Responsibilities:

• Work with SOC, Insider Risk, DLP, Red Team, Threat Intel, and other security functions to design, deliver and maintain efficient, reusable, and reliable security automations
• Responsible for the whole lifecycle of an automation playbook, from requirements gathering and -planning to design, testing, implementation, and maintenance
• Lead initiatives to proactively identify security automation opportunities, get buy in from internal stakeholders, deploy them and measure efficiencies gained
• Leverage Large Language Models (Open AI, Hugging face, etc.) to identify use cases that could force multiply security analysts’ ability to resolve incidents as well as automate actions wherever possible
• Work with detection team to build end to end solutions involving automated feedback loops to help better tune detections to enrich data and support complex detections
• Expand team’s automation capabilities to support all functions in security
• Provide quality checks on automations to reduce errors and enforce continuous improvement
• Advocate of standardization, where appropriate

Requirements:

• Masters/Bachelor's degree in Information & Computer Science, Statistics or a quantitative discipline in science
• Demonstrative experience in developing automation solutions for Cyber Security
• 5+ years Information Technology experience
• 4+ years of Cyber Security Experience
• 2+ years of any SOAR tool experience (Splunk SOAR, Sentinel, Swimlane, etc. )
• 4+ years of experience developing with Python
• Strong background in Python
• Working knowledge of scripting languages Bash and PowerShell
• Experience working with REST and other third-party API integrations
• Demonstrative experience in building solutions using OpenAI or other LLMs
• Knowledge of software development best practices, including coding standards, code reviews, and testing methodologies
• Strong understanding of IT security concepts and practices, with demonstrative experience in automating Information Security practices and workflows
• Proficient in utilizing GitHub for version control, collaboration, and code repository management
• Familiarity with continuous integration and continuous deployment (CI/CD) practices to streamline software development and deployment processes
• Experience in utilizing CI/CD tools (such as GitHub Actions) to automate build, test, and deployment processes, ensuring smooth and efficient software delivery
• Familiarity with infrastructure-as-code (IaC) tools (e.g., Terraform, CloudFormation) to automate infrastructure provisioning and ensure consistent environments throughout the development lifecycle
• Strong verbal communications skills and concise written communication skills
• Strong organizational and multi-tasking and time management skills
• authorized to work in the United States without sponsorship
• Prefers to work in agile team environment