Security Automation & AI Engineer

2 hours ago

Barcelona, SpainMid Level / Senior

Responsibilities

Design and maintain security automation workflows and SOAR playbooks for alert triage, enrichment, containment, and remediation.
Build detection-as-code pipelines for creating, testing, versioning, and deploying detection rules across SIEM and EDR platforms.
Develop AI-assisted investigation tools and scripts that correlate signals across security platforms.
Automate vulnerability scanning, prioritization, remediation tracking, and reporting workflows.
Advise on R&D CI/CD pipelines and embed automated security checks and controls into the software development lifecycle.
Build API-level integrations between security tools and platforms.
Collaborate with IT, R&D Engineering, Cloud, and DevOps teams on security automation initiatives.
Document automation workflows, runbooks, and operational procedures; evaluate emerging AI and automation technologies and lead proofs of concept.
Support incident response and threat hunting activities as needed.

Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering, or a related field, or equivalent practical experience.
3–5 years of experience in security operations, security engineering, or DevSecOps focused on automation and tooling development.
Strong proficiency in Python and experience with PowerShell, Bash, or other scripting languages, with the ability to write production-quality code.
Hands-on experience with CI/CD platforms such as GitHub Actions, Azure DevOps Pipelines, or Jenkins, plus Git version control.
Experience with SIEM, EDR, and/or SOAR platforms; familiarity with DLP and IAM tools is preferred.
Working knowledge of AWS, Azure, or GCP and infrastructure-as-code concepts.
Strong experience building and consuming APIs for tool integration and data orchestration.
Familiarity with AI/ML concepts and cybersecurity applications such as anomaly detection, automated classification, and LLM-based workflows; AI framework or platform experience is preferred.
Understanding of NIST, MITRE ATT&CK, CIS, and GDPR.
Relevant certifications such as GIAC GCSA, GIAC GMON, PCSAE, AWS Security Specialty, or equivalent are preferred.
Strong analytical, problem-solving, collaboration, communication, documentation, and continuous-learning skills.

1,001-5,000 employees