Automation Engineer

Ekco

. Design, build and maintain security automation workflows for the SOC, engineering and customer operations .

Posted 11/9/2026full-timeKuala Lumpur • MalaysiaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and automating security workflows using Tines and integrating various security platforms through REST APIs. Proficient in scripting and automation, with a strong focus on security operations and effective communication with both technical and non-technical stakeholders.

Highest-signal resume keywords

Tines Workflow AutomationREST API IntegrationPython ScriptingMicrosoft Sentinel ExperienceSecurity Operations Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Workflow AutomationREST APIsJSONPythonPowerShellJavaScriptKQLAzure ServicesSecurity Incident ResponseAutomation Testing

Soft Skills

Clear CommunicationProject ManagementProblem SolvingCollaboration

Tools & Technologies

TinesMicrosoft SentinelDefender XDRCrowdStrikeQRadarGrafanaAzure Data LakeLogic Apps

Certifications & Qualifications

Tines CertificationGIAC GCSAMicrosoft AZ-204AI-102

Industry Keywords

Security Operations CenterAutomation PlatformMulti-Tenant EnvironmentMSSPAI Capabilities

Tech Stack

Tools & technologies

AzureGrafanaJavaScriptPython

About the role

Key responsibilities & impact

Design, build and maintain security automation workflows for the SOC, engineering and customer operations
Build and improve Tines stories for alert triage, enrichment, response actions, reporting and internal operations
Integrate Tines with security and business platforms using REST APIs, webhooks, app registrations and message queues
Automate detection-to-response workflows using Microsoft Sentinel, Defender XDR, CrowdStrike and QRadar data
Add practical, secure and controlled AI capabilities such as LLM alert/report summaries, anomaly flagging and recommended actions, with human oversight
Automate customer onboarding and platform health checks with the Engineering Ops team
Follow story QA processes including peer review, test cases, change requests and controlled production promotion
Gather requirements from SOC teams, customers and stakeholders and translate them into designs
Write documentation and runbooks for story builds
Monitor automation failures and broken data flows and resolve issues quickly
Contribute to the automation roadmap and share knowledge with the team
Own automation projects from initial requirements through production and work with internal teams and customers, including regulated organisations

Requirements

What you’ll need

Hands-on experience building workflows in a SOAR or automation platform, ideally Tines
Strong understanding of REST APIs, JSON, authentication methods (OAuth, API keys, app registrations) and webhooks
Scripting experience in Python, PowerShell or JavaScript
Familiarity with KQL and Azure services (Logic Apps, Data Lake, Entra ID)
Experience with Azure Data Lake, Grafana or similar reporting tools
Working knowledge of security operations: alerts, incidents, triage and common response actions
Experience with at least one of Microsoft Sentinel, Defender XDR, CrowdStrike Falcon or QRadar
Practical interest in AI and LLMs, including their limits (accuracy, data handling, prompt injection)
Structured approach to testing, version control and change management
Clear written and verbal communication, with ability to explain technical work to non-technical people
Ability to own work end to end and manage several deliverables at once
Tines certification or a portfolio of Tines stories (nice to have)
Experience with LLM APIs such as Claude, Azure OpenAI or Microsoft Foundry and prompt design (nice to have)
Experience in an MSSP or multi-tenant environment (nice to have)
Automation-focused certifications such as GIAC GCSA, Microsoft AZ-204 or AI-102 (nice to have)
Experience building internal tools or web apps (nice to have)

Benefits

Comp & perks

25 days annual leave + public holidays
One extra day off for birthday leave
Company Pension Scheme
Employee Assistance Programme (EAP) for wellbeing support
EkcOlympics global team activity challenges
Unlimited access to Pluralsight for continuous development
Real opportunities to grow, including international progression
Flexible, family-friendly working
Career progression and internal mobility opportunities