Cybersecurity Automation Engineer

AeroVironment

. Design, build, and maintain automation workflows across SIEM, SOAR, endpoint security, identity, vulnerability management, cloud, and ticketing platforms .

Posted 10/26/2026full-timeUnited StatesMid-LevelSenior💰 $111,500 - $170,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and maintaining automation workflows across security platforms, utilizing programming languages such as Python and PowerShell. Proficient in integrating enterprise systems through APIs and implementing security best practices in automated solutions.

Highest-signal resume keywords

Automation Workflow DevelopmentPython ProgrammingAPI IntegrationSIEM/SOAR ExperienceSecurity Operations Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PythonPowerShellREST APIsJSON Data HandlingAutomation SolutionsIncident Response ProcessesVulnerability ManagementVersion ControlKQLInfrastructure as Code

Soft Skills

Strong Communication SkillsAbility to Prioritize WorkProblem-Solving Skills

Tools & Technologies

SIEM PlatformsSOAR PlatformsAzure Logic AppsMicrosoft IntunePalo Alto NetworksJiraAzure Functions

Certifications & Qualifications

Bachelor's Degree in CybersecurityU.S. CitizenshipEligibility for ITAR/EAR Export License

Industry Keywords

Security EngineeringAutomationIncident ResponseNIST Incident Response GuidanceMITRE ATT&CKCMMCNIST SP 800-171

Tech Stack

Tools & technologies

AzureCloudCyber SecurityPython

About the role

Key responsibilities & impact

Design, build, and maintain automation workflows across SIEM, SOAR, endpoint security, identity, vulnerability management, cloud, and ticketing platforms
Develop integrations using REST APIs, webhooks, SDKs, Python, and PowerShell
Automate alert enrichment, investigation support, case creation, evidence collection, notifications, and incident response actions
Correlate information across platforms to improve visibility, reduce manual effort, and support faster security decisions
Partner with security analysts and incident responders to translate operational playbooks into technical workflows
Automate vulnerability management activities, including asset enrichment, remediation ticket creation, ownership assignment, escalation, and closure validation
Build safeguards into automated actions, including approvals, access restrictions, validation checks, and rollback procedures
Implement secure authentication, secrets management, least-privilege access, and audit logging
Maintain automation code through version control, peer review, testing, documentation, and change management
Monitor automation health, troubleshoot failures, and handle API limits, platform changes, retries, and exceptions
Document integration architectures, data flows, dependencies, operating procedures, and troubleshooting guidance
Measure automation effectiveness through time saved, execution reliability, reduced manual handling, and improved response times
Automate security evidence collection and reporting to support control implementation and audit readiness
Identify and implement AI opportunities for alert enrichment, investigation summaries, incident prioritization, and response recommendations
Integrate AI capabilities with human oversight, data protection, output validation, and audit logging
Evaluate AI-assisted workflows for accuracy, reliability, and analyst efficiency

Requirements

What you’ll need

Three or more years of experience in security engineering, security automation, software development, or a related technical discipline
Demonstrated experience developing and maintaining automation solutions using Python, PowerShell, or comparable languages
Practical experience integrating enterprise platforms through APIs, including authentication, JSON data handling, pagination, and error handling
Working knowledge of security operations, incident response processes, and common endpoint, identity, network, and cloud threats
Experience with SIEM or SOAR platforms and workflow orchestration tools
Familiarity with Git, code review, testing, and secure development practices
Ability to troubleshoot complex workflows and dependencies across multiple systems
Strong written and verbal communication skills, including the ability to explain technical solutions to nontechnical stakeholders
Ability to prioritize work, manage competing requirements, and independently deliver maintainable solutions
Bachelor's degree in cybersecurity, computer science, information technology, or a related field, or equivalent practical experience
Experience with Microsoft security technologies, Azure Logic Apps, Azure Functions, Microsoft Intune, Palo Alto Networks, or Jira
Experience integrating AI capabilities, large language models (LLMs), or AI-enabled security tools into automation workflows
Experience supporting Azure Government, Microsoft GCC High, or other regulated enterprise environments
Familiarity with KQL, cloud automation, CI/CD pipelines, and infrastructure as code
Experience implementing automated response actions with human approval and operational safeguards
Familiarity with NIST incident response guidance, MITRE ATT&CK, CMMC, and NIST SP 800-171
Must qualify as a U.S. person under ITAR/EAR or be eligible for approval of an export license
U.S. Citizenship required

Benefits

Comp & perks

Medical, dental, and vision insurance
401(k) with company matching
9/80 work schedule
Paid holiday shutdown