Automation Engineer
About the role
The Automation Engineer will join an expanding Automation Team in Colombo, focusing on developing and optimizing automation workflows within SOAR or Hyperautomation platforms, particularly in MSSP, Incident Response, or multi-client security environments. Key responsibilities include building API integrations between various security tools, working extensively with JSON for data transformations, streamlining incident response automation, maintaining CI/CD pipeline infrastructure, and collaborating with SOC analysts and other security teams. The role also involves leading migration projects and continuously implementing emerging automation techniques to enhance security operations. Candidates should have at least 1 year of experience in security automation, strong scripting skills, and proficiency with APIs and security tools.
Must have
- 1+ years of experience in security automation, SOAR engineering, or cybersecurity automation within an MSSP, DFIR, or enterprise security environment.
- Extensive experience working with JSON, including JSON schema design, manipulation, parsing, and API-based data transformations.
- Strong scripting skills in Python, PowerShell, JavaScript, or Bash for workflow automation.
- Proficiency in API development and integration, including RESTful APIs, JSON-based APIs, and webhook automation.
- Experience working with SIEM (Splunk, Sentinel, QRadar, Rapid7 IDR, etc.) and EDR/XDR tools (Crowdstrike, SentinelOne, Cortex XDR, Stellar Cyber, etc.)
- Familiar with Ansible and DORA practices
- Knowledge of incident response, threat intelligence, and security event lifecycle management.
Nice to have
- Experience in multi-client environments (MSSP, IR firms, or security service providers).
- Hands-on experience with hyperautomation, XSOAR, Splunk SOAR, or similar platforms.
- Certifications: CompTIA Security+, AWS/Azure Security Certifications.
- Proficiency in using JQ filters for data manipulation.
- Familiarity with CI/CD pipelines (Azure DevOps)
- Experience automating cloud security workflows (AWS, Azure, Google Cloud).
- Familiarity with case management automation and cross-platform data normalization.
- Prior experience leading SOAR migration projects or developing custom security playbooks.
Technologies
- Ansible
- AWS
- Azure
- Azure DevOps
- Bash
- CI/CD
- Cloud Security
- CompTIA Security+
- Cortex XDR
- CrowdStrike
- Cybersecurity
- EDR
- GCP
- JavaScript
- JSON
- PowerShell
- Python
- QRadar
- Rapid7
- REST
- SentinelOne
- SIEM
- Splunk
- Stellar Cyber
- Webhooks
- XDR
Highlights
The company is committed to diversity and inclusion. The role is based in Colombo. SkilledSearch is the recruiting organization. Certifications such as CompTIA Security+ or AWS/Azure Security Certifications are considered advantageous but not mandatory.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka