Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Sunbit

Security Automation Engineer

Sunbit

. Build and maintain automation workflows connecting SIEM, EDR, cloud detection, vulnerability, and SaaS/data security tools via REST APIs and webhooks .

Posted 10/21/2026full-timeTel Aviv • IsraelMid-LevelSeniorWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in building and maintaining automation workflows for security operations, utilizing REST APIs and AI-assisted tools. Proficient in triaging security alerts, automating compliance processes, and collaborating across teams to enhance security posture.

Highest-signal resume keywords
Automation Workflow DevelopmentREST API IntegrationSecurity Operations ExperienceAI Coding Tools UsageCloud Environment Understanding

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Security FundamentalsAlert TriageScript DevelopmentDebugging ScriptsAutomation IntegrationCompliance AutomationIncident DocumentationFalse-Positive Rate TrackingRunbook MaintenanceSLA Reporting
Soft Skills
Clear Written CommunicationCollaboration
Tools & Technologies
SIEMEDRN8nTinesJiraAWSGCPCortex XSOARGitTerraform
Industry Keywords
SOC 2PCI DSSFintechAI SecurityVulnerability Tools

Tech Stack

Tools & technologies
AWSCloudGoogle Cloud PlatformSplunkTerraform

About the role

Key responsibilities & impact
  • Build and maintain automation workflows connecting SIEM, EDR, cloud detection, vulnerability, and SaaS/data security tools via REST APIs and webhooks
  • Build scan-to-ticket pipelines, alert enrichment, and remediation routing
  • Add AI-assisted steps such as LLM-based alert summaries and context gathering, with human oversight where appropriate
  • Automate SLA reminders, escalations, and status reporting
  • Secure automations and AI agents through least-privilege API access, secrets handling, and prompt-injection risk management
  • Triage security alerts across cloud, endpoint, and identity environments
  • Classify alerts according to the severity framework and escalate confirmed incidents
  • Convert repeated triage steps into enrichment or auto-resolution playbooks
  • Track false-positive rates and collaborate with Engineering on detection tuning
  • Document incidents, maintain timelines, and keep runbooks and playbooks current
  • Automate recurring evidence collection for SOC 2 and PCI DSS
  • Build dashboards for response time, SLA compliance, false-positive rates, and automation coverage
  • Report directly to the SecOps Team Lead and collaborate with Engineering, IT, GRC, and application teams

Requirements

What you’ll need
  • Hands-on experience in security operations, IT, DevOps, or software engineering, or equivalent hands-on security projects (internship, labs, home lab, CTFs)
  • Security fundamentals: common threats, attack techniques, and controls, plus some hands-on alert triage or log investigation
  • Ability to build scripts that call REST APIs and handle authentication and errors
  • Ability to read, test, and debug scripts
  • Experience building at least one automation or integration for a security or operational workflow, with n8n, Tines, a SOAR, or personal scripts
  • Daily use of AI coding tools and LLMs
  • Basic understanding of cloud environments (AWS, GCP)
  • Comfortable with Jira or similar tools
  • Clear written English for tickets, runbooks, and follow-ups
  • Nice to have: workflow automation or SOAR platforms such as n8n, Tines, Torq, Cortex XSOAR, or Splunk SOAR
  • Nice to have: hands-on experience with SIEM, EDR, cloud security, or vulnerability tools through their APIs
  • Nice to have: LLM-powered workflows or AI agents, including LLM APIs, MCP, or AI nodes in n8n
  • Nice to have: interest in AI security, including prompt injection, agent permissions, and LLM data leakage
  • Nice to have: Git, Terraform, CI/CD, or detection-as-code such as Sigma rules
  • Nice to have: dashboards on operational or security data
  • Nice to have: compliance automation in a regulated environment, including SOC 2 or PCI DSS
  • Nice to have: fintech experience
  • Nice to have: GitHub repository or portfolio of projects

Benefits

Comp & perks
  • Direct mentorship from the SecOps Team Lead
  • Clear growth path as the team scales
  • Real influence on how SecOps is built at Sunbit
  • Automation-first role with room to apply AI to security operations