Security Automation Engineer

Foresite is seeking a highly motivated and passionate Security Automation Engineer with a strong foundation in cybersecurity and robust Python development skills to join our growing team. In this critical internal role, you will be instrumental in supporting and enhancing Foresite's proprietary security products, including our SOAR-powered ecosystem.

This is a non-client-facing role. Your primary customer will be our internal Security Operations Center (SOC), and your work will directly empower them to triage, investigate, and respond to threats more effectively. If you are an exceptional problem solver who thrives on building robust automation, writing clean code, and working behind the scenes to optimize security operations, we encourage you to apply!

Note: While experience with Google SecOps SOAR is highly valued, we are fully prepared to train a strong Cybersecurity and Python specialist who has a passion and willingness to master the platform.

What You'll Do:

As a Security Automation Engineer, you will act as a core developer and technical enabler for our internal SOC. Your responsibilities will include:

• Custom Scripting & Integration: Write, optimize, and maintain robust Python scripts to build custom RESTful API integrations, automate repetitive workflows, and orchestrate security tool actions.

• Database & Data Management: Design and maintain databases (SQL/NoSQL) to store, retrieve, and transition threat intelligence and alert data seamlessly within automated security workflows.

• Version Control & CI/CD: Leverage Git and GitHub best practices to manage code repositories, review team playbooks, and maintain structured version control for all scripts and configurations.

• SOAR Playbook Enablement: Design, build, and troubleshoot automation playbooks within Google SecOps SOAR to support Foresite's proprietary tools and streamline analyst workflows.

• Internal SOC Support: Serve as the primary technical resource for our SOC analysts. Troubleshoot playbook failures, optimize ingestion pipelines, and act as a reliable partner in resolving engineering issues.

• Continuous Improvement: Collaborate with internal security engineering leadership to analyze bottleneck processes and implement automated solutions that dramatically decrease mean-time-to-detection (MTTD) and response (MTTR).

• Documentation: Create and maintain comprehensive internal documentation for custom integrations, database schemas, and playbook logic to support team cross-training and ongoing maintenance.

Who You Are:

• The Ultimate Problem-Solver: You are a natural self-starter with excellent analytical skills and meticulous attention to detail. You love debugging complex code and finding elegant solutions to automation challenges.

• Cybersecurity & Coding Hybrid: You possess 3-5 years of experience in security engineering or security operations, combined with a strong background in Python development.

• API & Integration Specialist: Highly proficient in working with RESTful APIs, parsing complex JSON structures, and securely transmitting data across diverse platforms.

• GitHub & Database Literate: Demonstrated experience with GitHub (branching, merging, pull requests) and working directly with SQL or NoSQL databases.

• Willingness to Learn SOAR: If you don't already have experience with Google SecOps SOAR (formerly Siemplify) or other major SOAR platforms, you have an active eagerness and aptitude to learn and master it quickly.

• Team Collaborator: Strong interpersonal and communication skills to work closely with SOC analysts, understand their pain points, and translate operational needs into technical requirements.

Why Join the Foresite Team?

At Foresite, we aren’t just another security provider—we are a mission-driven partner helping organizations navigate an increasingly complex threat landscape. Founded by passionate security practitioners, we’ve grown into a global leader in SecOps and MDR by staying true to our core value: radical transparency. When you join Foresite, you are part of a "humans-first" culture where your expertise is valued, and your well-being is a priority. We leverage our Google Cloud Premier SecOps Partnership to stay at the cutting edge, but we know that our greatest asset is our people.

What We Offer:

• Comprehensive Health & Wellness: Robust medical insurance options to keep you and your family healthy.

• Employer-Covered Insurance: We fully provide employer paid Dental coverage, as well as Short-Term (STD) and Long-Term Disability (LTD) to ensure you are protected financially if life takes an unexpected turn.

• Generous Time Off: We believe in a true work-life balance. You’ll start with 3 weeks of paid vacation, plus additional sick leave and paid company holidays to ensure you have time to recharge.

• Growth & Mentorship: Access to world-class training and mentorship. We support your career trajectory, whether you’re looking to deepen your technical skills or move into leadership.

• Impactful Work: Help protect global clients using the latest AI-enhanced security tools and GCP native technologies.