Active listing
Senior Security Automation Engineer
About the role
Clearwater seeks a Senior Security Automation Engineer to lead the design and implementation of automated playbooks and integrations across security platforms. The role focuses on orchestrating workflows for phishing triage, host isolation, and user offboarding, building custom connectors to SIEM, EDR, and ticketing systems, and developing ChatOps bots for Slack and Teams. Candidates will leverage Python or Golang, REST/gRPC APIs, and SOAR concepts to create logic-driven automation, while integrating Generative AI for ticket triage and IoC extraction. Strong experience with OIDC/OAuth, API keys, webhooks, and containerization (Docker) is essential. The position requires a deep understanding of incident response lifecycles, JSON/YAML data formats, and the ability to collaborate across cross-functional teams to deliver secure, scalable automation solutions.
What you’ll do
- Design automated playbooks for security scenarios like phishing triage and host isolation.
- Build custom connectors to link systems via REST/gRPC APIs.
- Develop bots for internal collaboration platforms to enable self-service security tasks.
- Implement Generative AI workflows to parse tickets, summarize alerts, and extract IoCs.
What you’ll bring
- Proficient in Python or Golang for API interaction and data processing.
- Experience with RESTful APIs, Webhooks, OIDC/OAuth, and API Keys.
- Knowledge of SOAR concepts and workflow engines.
- Understanding of Incident Response lifecycle and JSON/YAML formats.
Nice to have
- Experience with ITSM platforms like ServiceNow or Jira.
- Frontend JS/TS skills for dashboards or browser extensions.
- Containerization experience with Docker.