Staff Security Automation Engineer

Stack

Responsibilities

• ▹Build and own security log pipelines: extract logs from source systems, transform and enrich them, and deliver them into the SIEM
• ▹Operate and improve the SIEM: onboard new sources, build and tune detections and alerts
• ▹Deploy and tune security controls across a fleet of managed macOS and Windows workstations and AWS WorkSpaces virtual desktops
• ▹Build internal tooling and automation that removes manual toil in triage and remediation, primarily in Python
• ▹Instrument the environment for security signal by integrating tooling through APIs and writing connective code
• ▹Establish secure defaults in Infrastructure as Code through reusable modules and policy as code
• ▹Build security into CI/CD: scanning, secrets detection, and policy-as-code gates
• ▹Own the reliability and coverage of the pipelines and tooling as a platform
• ▹Work directly in systems the team does not own: read the code or infrastructure, make changes safely, and get them through review

Requirements

• ▹8+ years of hands-on security engineering with a focus on automation, tooling, and instrumentation
• ▹Comfortable writing custom code and scripting, primarily in Python, to build tooling and log pipelines from scratch
• ▹Hands-on experience building and operating log pipelines end to end: collection, parsing, enrichment, and delivery into a SIEM
• ▹Hands-on SIEM experience: onboarding sources and building or tuning detections and alerts
• ▹Experience deploying and managing endpoint security across a mixed fleet of macOS and Windows workstations, including virtual desktops

Soft skills

About the company

Beyond Finance's mission is to help everyday Americans escape the cycle of crippling debt through compassionate, individualized care, a culture focused on compliance and ethics, and customized financial solutions; the company has helped over 1 million clients.