{"id":590092,"url":"https://alion.io/job/wpp-security-automation-engineer-2","title":"Security Automation Engineer","company":{"id":5467,"name":"WPP","domain":"wpp.com","url":"https://alion.io/company/wpp","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":88,"open_postings":26,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":56,"computed_at":"2026-10-02T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chennai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17500,"max_usd":46000,"period":"year","method":"role_country_seniority_unknown","sample_n":34},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"Azure","optional":false},{"name":"Cortex","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"GCP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-09-10T07:27:37Z","employer_posted_date":"2026-09-10","last_verified_at":"2026-10-02T08:56:34Z","board_verified":true,"closed_at":null,"days_open":22,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":22},"description":"WPP is the trusted growth partner for the world’s leading brands. \nWe unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company - powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. \n\nWe work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.\n\nOur people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. \n\nFor more information, visit WPP.com.\n\nWhy we're hiring:\nThe Automation Engineer is responsible for designing, developing, and maintaining security automation solutions that enhance detection, response, workflow efficiency, and operational consistency across Operational Security. Working under the Automation Lead, this role builds high-quality SOAR playbooks, integrations, scripts, AI-assisted workflows, and orchestration pipelines to reduce manual workloads and support the Autonomic Security Operations (ASO) model.\nWhat you'll be doing:\nCore Responsibilities\nAutomation Engineering & Development\nDevelop SOAR playbooks, workflows, and automations for alert triage, enrichment, containment, and remediation.\nBuild scalable, reusable automation components, scripts, and integrations.\nImplement high-quality scripting using Python, PowerShell, and REST APIs.\nEnsure appropriate version control, QA, testing, and documentation of automation artefacts.\nMaintain reliability of automations by monitoring performance, exceptions, and system behaviour.\nPlatform Integration & Tooling Engineering\nIntegrate SOAR with SIEM, EDR, TIP, cloud-native security tools, and case management systems.\nEngineer automation pipelines to support Microsoft and Google security ecosystems.\nDevelop API integrations, webhooks, and event-driven automation triggers.\nSupport data transformation, enrichment, and telemetry orchestration requirements.\nAI / ML Automation Enablement\nContribute to embedding AI/ML-driven enrichment and correlation logic into automated workflows.\nSupport operationalisation of ML models for anomaly detection and decision support.\nCollaborate with data and detection teams to refine and enhance AI-enabled automation.\nWorkflow Engineering & Process Automation\nTranslate SOPs, response runbooks, and detection workflows into automated processes.\nIdentify automation opportunities to eliminate manual tasks across SecOps functions.\nEnsure automated processes remain consistent, auditable, and compliant with Operational Security standards.\nOperational Collaboration & Support\nWork with Detection Engineering, Incident Response, Threat Hunting, and Threat Intelligence teams to automate use cases.\nParticipate in post-incident reviews and embed improvements into automation workflows.\nAssist with tool evaluations, optimisation initiatives, and integration efforts led by the Automation Lead.\nContinuous Improvement\nContribute to a backlog of automation enhancements and new capabilities.\nOptimise accuracy, resilience, and efficiency across automation workflows.\nEnsure alignment with GCAT SOC10x principles, including 10X Technology, Process, Speed, and Visibility.\nWhat you'll need:\nTechnical Expertise\nExperience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, or Chronicle SOAR.\nProficiency in Python and/or PowerShell for automation development.\nStrong understanding of REST APIs, JSON, and event-driven automation.\nExperience integrating SIEM, EDR, TIP, and cloud-native security tools.\nProcess & Operational Knowledge\nUnderstanding of workflows across SOC, Incident Response, Threat Hunting, and Detection Engineering.\nAbility to convert operational requirements and SOPs into engineered automation.\nFamiliarity with playbooks, runbooks, and security process governance.\nCollaboration & Delivery\nStrong communication and documentation skills.\nAbility to work in an engineering-led, automation-first culture.\nExperience working with cross-functional technical teams in security operations.\nCertifications (Preferred)\nSOAR platform certifications.\nGIAC (GMON, GCTI, GCIH, GCDA).\nPython or scripting certifications.\nAzure or GCP cloud certifications.\nKey Attributes\nEngineering-first mindset with strong attention to detail.\nProblem-solving orientation with a focus on automation and efficiency.\nStructured, methodical, and reliable approach to delivery.\nCommitment to operational excellence and continuous improvement.\nWho you are:\nYou're open: we are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.\nYou're optimistic: we approach all that we do with confidence: to try the new and to seek the unexpected.\nYou're extraordinary: We are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.\nWhat we'll give you:\nPassionate, inspired people - we champion a culture of people that do extraordinary work\nScale and opportunity - we offer the opportunity to create, influence and deliver projects at a scale that is unparalleled in the industry.\nChallenging and stimulating work - unique work and the opportunity to join a group of creative problem solvers. \n#LI-Hybrid \nWe believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process.\nWPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers.\nPlease read our Privacy Notice (https://www.wpp.com/en/careers/wpp-privacy-policy-for-recruitment) for more information on how we process the information you provide.","description_format":"text","description_chars":6398,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Media & Entertainment","Sales & Marketing","Creative Agencies","Digital Marketing"],"lifecycle":[{"event":"open","at":"2026-09-10T09:49:32Z"}],"liveness":{"score":47,"band":"ok","label":"Likely open","p_open":1,"p_active":0.518,"p_room":0.9,"age_days":21,"expected_fill_days":56,"reasons":["conf:11","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-02T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/wpp-security-automation-engineer-2","json_url":"https://alion.io/job/wpp-security-automation-engineer-2.json","meta":{"generated_at":"2026-10-03T01:25:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":1410,"day_limit":5000,"remaining_today":3590,"minute_limit":60,"resets_at":"2026-10-04T00:00:00Z"}}}