Automation Engineer

This is a fully remote position.

Argyll Scott is proud to be partnered with a leading global technology business as they're looking to bring onboard an Automation Engineer.

About the Role

Our client, a global enterprise, is looking for an Automation Engineer to join its Security Automation Team. You will build and evolve the automation that lets security operations run efficiently, consistently and at scale across a large, international organisation.

You will combine software engineering skills with a solid grounding in security operations, working alongside SOC analysts, incident responders and detection engineers to turn operational needs into automation that speeds up response and frees analysts to focus on higher-value work.

What You Will Do

• Design, build and enhance Cortex XSOAR playbooks, integrations, scripts and workflows
• Develop Python automation covering enrichment, investigation, containment, case management and notification
• Connect security and business platforms (SIEM, EDR, identity, email security, collaboration tools) via APIs
• Work with analysts and stakeholders to capture requirements and deliver solutions from design through to deployment and ongoing support
• Troubleshoot automation failures, integration issues and workflow defects, improving reliability and scalability
• Maintain reusable frameworks, development standards and automated testing
• Use AI-assisted development tools (such as Claude, Codex and Kiro) to boost engineering productivity
• Document procedures, dependencies and troubleshooting guidance, and share knowledge with the wider team
• Support production services through monitoring and participation in an on-call rotation

What You Will Bring

• 2-4 years experience in software engineering, automation engineering, security engineering or SOAR development
• Hands-on experience building automation in Cortex XSOAR or a comparable SOAR platform
• Strong Python development and scripting skills (essential)
• Experience with REST APIs, JSON, authentication mechanisms and third-party integrations
• Understanding of security operations workflows, including alert triage, investigation, incident response and case management
• Proficiency with Git and GitLab
• Strong troubleshooting, analytical and problem-solving abilities
• Ability to translate business requirements into technical solutions
• Excellent written and verbal communication skills
• Comfortable working in a globally distributed team
• Willingness to join an on-call rotation supporting critical services

Why Apply

This is an opportunity to shape security automation for a global business, working with modern tooling, an international team and real influence over how security operations scale.

Argyll Scott Asia is acting as an Employment Business in relation to this vacancy.