Senior Analyst-IT & Information Security- Python Security Automation_3377

About the role

The role is responsible for building and maintaining the SOAR playbooks and Google SecOps workflows that allow the ACDC to handle security cases at scale — centralized and as automated as possible.The engineer will integrate Google SecOps SIEM with CrowdStrike EDR, automate the end-to-end security case lifecycle, and continuously reduce manual effort across the security operations team.

What you'll do

• Build, maintain, and optimize SOAR playbooks within Google SecOps to automate security case triage, investigation, and remediation
• Integrate Google SecOps SIEM with CrowdStrike EDR and other data sources for seamless alert ingestion and correlation
• Automate the full security case lifecycle: log ingestion → alert creation → triage → true/false positive classification → Archer incident creation or case closure
• Develop Python scripts and automation workflows to reduce manual analyst touchpoints across the ACDC
• Integrate REST APIs with third-party security tools for orchestration and enrichment

What you need

• 3–5 years in cybersecurity
• Python
• SIEM
• EDR
• REST APIs
• Git
• Any graduate

Good to have

• CI/CD
• AWS
• Jenkins
• Azure
• Grafana