Cybersecurity Automation Engineer
AeroVironment, Inc.17 days ago
Huntsville, AL, USA or Dayton, OH, USAMid Level
Base Salary
$112k - $170k/yr
Responsibilities
- Design, build, and maintain cybersecurity automation workflows across SIEM, SOAR, endpoint security, identity, vulnerability management, cloud, and ticketing platforms.
- Develop Python, PowerShell, API, webhook, and SDK integrations with authentication, JSON handling, pagination, and error handling.
- Automate alert enrichment, investigations, case creation, evidence collection, notifications, incident response, and vulnerability remediation activities.
- Implement safeguards including approvals, access restrictions, validation checks, rollback procedures, secure authentication, secrets management, least-privilege access, and audit logging.
- Maintain automation code through version control, peer review, testing, documentation, and change management.
- Monitor automation health, troubleshoot failures, document architectures and procedures, and measure operational effectiveness.
- Automate security control evidence collection and reporting to support audit readiness.
- Identify, integrate, and evaluate AI-assisted security workflows for alert enrichment, investigation summaries, prioritization, and response recommendations.
Requirements
- At least three years of experience in security engineering, security automation, software development, or a related technical discipline.
- Demonstrated experience developing and maintaining automation solutions with Python, PowerShell, or comparable languages.
- Practical experience integrating enterprise platforms through APIs, including authentication, JSON data handling, pagination, and error handling.
- Working knowledge of security operations, incident response, and endpoint, identity, network, and cloud threats.
- Experience with SIEM or SOAR platforms and workflow orchestration tools.
- Familiarity with Git, code review, testing, secure development practices, and troubleshooting complex workflows.
- Strong written and verbal communication skills and the ability to explain technical solutions to nontechnical stakeholders.
- Bachelor’s degree in cybersecurity, computer science, information technology, or a related field, or equivalent practical experience.
- Experience with Microsoft security technologies, Azure Logic Apps, Azure Functions, Microsoft Intune, Palo Alto Networks, or Jira is preferred.
- Experience with AI capabilities, large language models, AI-enabled security tools, Azure Government, Microsoft GCC High, KQL, cloud automation, CI/CD pipelines, infrastructure as code, and automated response safeguards is preferred.
- Familiarity with NIST incident response guidance, MITRE ATT&CK, CMMC, and NIST SP 800-171 is preferred.
- Applicants must qualify as a U.S. person under ITAR/EAR requirements or be eligible for export-license approval; some positions require current U.S. citizenship.
Benefits
- Medical, dental, and vision benefits.
- 401(k) with company matching.
- 9/80 work schedule.
- Paid holiday shutdown.
- Regular full-time position; ITAR/EAR access restrictions and export-license conditions apply.
About AeroVironment, Inc.
AeroVironment builds small unmanned aircraft systems, loitering munitions (e.g., Switchblade), and related software, sensors, and services for U.S. and allied defense agencies. The public company (NASDAQ: AVAV), founded in 1971 and headquartered in Arlington, Virginia, sells hardware, training, and lifecycle support, with widely fielded systems such as Raven, Puma, and Wasp. It also offers autonomy and robotic technologies used in reconnaissance, targeting, and force protection missions.