{"id":3008470,"url":"https://alion.io/job/sunbit-security-automation-engineer","title":"Security Automation Engineer","company":{"id":58831,"name":"Sunbit","domain":"sunbit.com","url":"https://alion.io/company/sunbit","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"GCP","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"Jira","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"n8n","optional":false},{"name":"PCI DSS","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Slack","optional":false},{"name":"SOC 2","optional":false},{"name":"Tines","optional":false},{"name":"CI/CD","optional":true},{"name":"Cortex","optional":true},{"name":"Cortex XSOAR","optional":true},{"name":"Git","optional":true},{"name":"GitHub","optional":true},{"name":"Model Context Protocol","optional":true},{"name":"Prometheus","optional":true},{"name":"Splunk","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-21T13:27:10Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-23T01:57:37Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Description\nAt Sunbit, we're building financial technology that puts people first. By combining intelligent decisioning with a personalized, transparent approach, we help consumers access the payment options that are right for them while empowering merchants to build stronger customer relationships.\nEngineering is at the heart of how we make that happen. We build scalable distributed systems, cloud-native services, intelligent data platforms, and AI-powered solutions that enable real-time financial decisions at scale. By leveraging modern engineering practices and integrating AI into both our products and development workflows, we solve complex technical challenges, accelerate innovation, and continuously improve the way we build software. Every service, model, and architectural decision we make directly impacts our products, our customers, and the future of financial technology.\nAbout the Role\nWe're hiring the first Security Automation Engineer for Sunbit's new Security Operations (SecOps) team, reporting directly to the SecOps Team Lead. SecOps is the single point of accountability for security operations at Sunbit. We run the pipelines that take an alert or finding from detection to verified closure, working with Engineering, IT, GRC, and application teams.\nWe cover a broad security domain with a deliberately lean team, and that only works if the pipelines run themselves. Your job is to build that. You'll build the workflows and integrations that connect our security tools to each other, to Jira, and to Slack, so alerts arrive enriched, findings reach the right owner with context, and follow-up happens without anyone chasing it by hand.\nThis is a hands-on engineering role: you'll build workflows and write code every week, and we expect you to use AI tools to move faster. We care more about what you've built than about years of experience.\nWhat You'll Do\nSecurity Automation & Integrations\nBuild and maintain automation workflows that connect our SIEM, EDR, cloud detection, vulnerability, and SaaS/data security tools via REST APIs and webhooks\nBuild scan-to-ticket pipelines, alert enrichment, and remediation routing that send each finding to the right team with full context\nAdd AI-assisted steps where they help, such as LLM-based alert summaries and context gathering, with a human in the loop where it matters\nAutomate SLA reminders, escalations, and status reporting so follow-up runs on its own\nKeep automations and AI agents secure: least-privilege API access, secrets handling, and prompt-injection risk\nDetection & Response Operations\nTriage security alerts across cloud, endpoint, and identity; classify them per our severity framework and escalate confirmed incidents\nTurn every repeated triage step into an enrichment or auto-resolution playbook\nTrack false-positive rates and work with Engineering on detection tuning\nDocument incidents, maintain timelines, and keep runbooks and playbooks current\nCompliance Automation & Metrics\nAutomate recurring evidence collection for SOC 2 and PCI DSS\nBuild dashboards for time to respond, SLA compliance, false-positive rates, and automation coverage\nRequirements\nHands-on experience in security operations, IT, DevOps, or software engineering, or equivalent hands-on security projects (internship, labs, home lab, CTFs)\nSecurity fundamentals: common threats, attack techniques, and controls, plus some hands-on alert triage or log investigation\nScripting ability: you can build a script that calls a REST API and handles authentication and errors, and you can read, test, and debug it\nYou've built at least one automation or integration for a security or operational workflow, with n8n, Tines, a SOAR, or your own scripts\nYou use AI coding tools and LLMs day to day\nBasic understanding of cloud environments (AWS, GCP)\nComfortable with Jira (or similar) and clear written English for tickets, runbooks, and follow-ups\nNice to Have\nWorkflow automation or SOAR platforms (n8n, Tines, Torq, Cortex XSOAR, Splunk SOAR)\nHands-on with SIEM, EDR, cloud security, or vulnerability tools, through their APIs and not just their consoles\nBuilt LLM-powered workflows or AI agents (LLM APIs, MCP, AI nodes in n8n)\nInterest in AI security: prompt injection, agent permissions, data leakage through LLMs\nGit, Terraform, CI/CD, or detection-as-code (e.g., Sigma rules)\nBuilding dashboards on operational or security data\nCompliance automation in a regulated environment (SOC 2, PCI DSS)\nFintech experience\nA GitHub repo or portfolio of things you've built\nWhy This Role Is Different\nHire #1 on a new team, with real influence on how SecOps is built at Sunbit\nBroad scope on a modern stack: detection and response, cloud security, vulnerability management, identity, data security, and compliance\nAutomation-first: your success is measured by how much manual work you eliminate, and you'll have real room to apply AI to security operations\nDirect mentorship from the SecOps Team Lead, with a clear growth path as the team scales\nRecruitment Fraud Disclaimer\nWe’ve been made aware of fraudsters impersonating Sunbit employees during the hiring process. Please note that all official communication will come from an @sunbit.com email address, through our applicant tracking platform @sunbit.comeet-notifications.com or directly via LinkedIn. We will never ask for your age, Social Security number, bank account details, payment of any kind, or other unrelated personal information during the application process. Our hiring process always includes interviews, either by phone, zoom, or in person, before any offer is made. If something feels suspicious, please contact us at HR to confirm. We ask that you contact HR only about potential instances of fraud. HR does not reach our recruiting team directly. Your application directly through the posting is the best way to ensure that your candidacy is reviewed by our team. Due to the volume of applications, we will not respond to nor forward emails about your candidacy that are sent to HR directly, and your email about your application will be deleted from our systems.","description_format":"text","description_chars":6094,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Israel","iso":"IL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Buy Now, Pay Later"],"lifecycle":[{"event":"open","at":"2026-10-21T14:43:05Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":34,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/sunbit-security-automation-engineer","json_url":"https://alion.io/job/sunbit-security-automation-engineer.json","meta":{"generated_at":"2026-10-23T03:23:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5599,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58831},"rest":"https://alion.io/mcp/rest/get_company?id=58831"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsunbit-security-automation-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsunbit-security-automation-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsunbit-security-automation-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sunbit-security-automation-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsunbit-security-automation-engineer"}]}