{"id":2419936,"url":"https://alion.io/job/eze-castle-integrations-security-automation-engineer-devsecops","title":"Security Automation Engineer (DevSecOps)","company":{"id":3810727,"name":"Eze Castle Integrations","domain":"eci.com","url":"https://alion.io/company/eze-castle-integrations","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Dayforce","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":104000,"max_usd":205000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":374},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"Elastic SIEM","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Logstash","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-07-22T05:00:00Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-13T16:07:03Z","board_verified":true,"closed_at":null,"days_open":83,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":83},"description":"Security Automation Engineer (DevSecOps)\nPosition Summary\nThe Security Automation Engineer is part of ECI's Security Engineering team and focuses on building and operating the automation layer that powers security services at scale. This is a hands-on engineering role with strong emphasis on production Python, integration engineering, and reliable delivery. You will design and maintain automation services, detection-as-code pipelines, and SOAR workflows that integrate with the wider security platform. As part of our modern engineering approach, this role uses AI-assisted workflows to improve delivery quality, reduce repetitive operational effort, and accelerate security outcomes across detection, response, and platform services.\nYou will work within the Automation function, where your focus is building and operating the code, workflows, and integrations that deliver detection and response outcomes. You will partner closely with Platform Engineering, which is accountable for the Elastic environment, Logstash estate, and core data pipelines that provide the telemetry your automations depend on. In practice, this means Automation owns how workflows are engineered, tested, deployed, and maintained, while Platform owns data ingestion, parsing standards, schema quality, and platform reliability.\nResponsibilities\nBuild and maintain production Python services, internal tooling, and reusable libraries for security automation.\nBuild and operate detection-as-code workflows including rule lifecycle, testing, versioning, and release controls.\nDevelop and maintain SOAR workflows for investigation and response orchestration.\nEngineer robust integrations across internal systems and third-party tools using REST APIs, webhooks, and event-driven patterns.\nBuild and maintain CI/CD pipelines, automated tests, and quality gates for automation and detection content.\nContribute automation capabilities that support Platform-led client onboarding, offboarding, and technology enablement processes.\nImprove reliability, observability, and maintainability of automation services through metrics, logging, alerting, and runbooks.\nCollaborate in architecture and code review practices to raise engineering standards across the function.\nExplore and apply AI-assisted engineering practices to improve automation quality, testing, documentation, and delivery efficiency.\nRequirements\nDegree in Computer Science, Cyber Security, Engineering, or equivalent practical experience.\n3+ years building and maintaining production Python applications, services, or automation systems.\nStrong software engineering fundamentals: modular design, testing strategy, error handling, code review, and maintainable code structure.\nExperience building API integrations and automation workflows in production environments.\nPractical CI/CD experience with automated testing and controlled deployment workflows.\nProficiency with Git and collaborative development practices.\nWorking knowledge of Linux administration in engineering environments.\nWorking knowledge of cloud platforms and services, including IAM, networking, and secure integration patterns in AWS, Azure, or GCP.\nFoundational understanding of detection and incident response concepts within security operations.\nInterest in AI-assisted engineering, emerging technologies, and modern engineering practices that improve delivery quality and efficiency.\nInterest in evolving security threats, cyber security trends, and the changing technology landscape.\nPreferred\nExperience with SOAR platforms and workflow orchestration in enterprise security environments.\nExperience with detection engineering in Elastic Security, Splunk, or Microsoft Sentinel.\nFamiliarity with MITRE ATT&CK, Sigma, or detection-as-code practices.\nExperience integrating AI-assisted capabilities into operational workflows.\nExposure to containerized deployment patterns with Docker or Kubernetes.\nExperience developing shared internal tooling used by multiple engineering teams.\nWhat Good Looks Like\nYou ship high-quality Python services and tooling that are reliable, testable, and easy for others to extend.\nDetection and automation changes move through a repeatable engineering lifecycle with clear quality controls.\nIntegrations are robust, observable, and resilient under real operational load.\nAutomation delivery reduces manual operational effort while improving consistency and response speed.\nYou raise team engineering standards through strong design, documentation, and review discipline.\nYou use AI-assisted workflows in practical, controlled ways that improve automation quality, reduce manual effort, and accelerate response outcomes.","description_format":"text","description_chars":4663,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Security Operations","Information Security","Managed IT Services (MSP)"],"lifecycle":[{"event":"open","at":"2026-10-13T04:52:21Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.358,"p_room":0.28,"age_days":83,"expected_fill_days":19,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/eze-castle-integrations-security-automation-engineer-devsecops","json_url":"https://alion.io/job/eze-castle-integrations-security-automation-engineer-devsecops.json","meta":{"generated_at":"2026-10-13T19:56:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30562,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3810727},"rest":"https://alion.io/mcp/rest/get_company?id=3810727"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Feze-castle-integrations-security-automation-engineer-devsecops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Feze-castle-integrations-security-automation-engineer-devsecops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Feze-castle-integrations-security-automation-engineer-devsecops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/eze-castle-integrations-security-automation-engineer-devsecops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Feze-castle-integrations-security-automation-engineer-devsecops"}]}