Automation Engineer for Security

**Automation Engineer – Cybersecurity focus** We are looking for a Automation Engineer with a strong cybersecurity mindset to design, build, and optimize automated detection and response solutions. You will work at the intersection of security engineering, automation, and platform integration, focusing on detection use cases, SIEM/SOAR tooling, and scalable automation workflows. **Tasks** - Develop and optimize security detection use cases - Build automation workflows using Python and REST APIs - Write and maintain XQL/KQL queries (e.g., XSIAM) - Analyze large datasets to identify anomalies and threats - Work with logs from Windows, Active Directory, Linux, and network traffic (DNS, HTTP) - Implement and improve SIEM/SOAR integrations and automated responses - Align detections with frameworks like MITRE ATT&CK - Debug and enhance queries, scripts, and playbooks **Requirements** - Python skills - Solid experience with REST APIs - Hands-on with XQL & KQL and detection engineering - Knowledge of: - Ability to analyze large datasets - Background in Cybersecurity - Knowledge of Azure (Entra ID) - Basic JavaScript & HTML Burimi: https://al.linkedin.com/jobs/view/automation-engineer-for-security-at-lufthansa-industry-solutions-4418346030

Niveli: mid level