Sr. Security Automation Engineer

Full-time - Mid Level

New Britain, CT

About the position

As a Sr. Security Automation Engineer, you’ll be part of our Corporate Information Technology Security team working as a remote employee. As a highly skilled and experienced Senior SOAR (Security Orchestration, Automation, and Response) Engineer you will have a deep understanding of security operations, automation frameworks, and incident response processes. You will play a critical role in enhancing our security posture by developing and implementing SOAR solutions that streamline and automate security operations at Stanley Black & Decker.

Responsibilities

• Design, develop, and implement SOAR solutions to automate security operations and incident response workflows.
• Collaborate with security analysts, incident responders, and other stakeholders to identify automation opportunities and improve existing processes.
• Create and maintain playbooks for incident response, threat hunting, and other security operations tasks.
• Integrate SOAR tools with existing security technologies (SIEM, threat intelligence platforms, firewalls, etc.) to enhance data collection and response capabilities.
• Monitor and analyze security events and incidents, providing insights and recommendations for continuous improvement.
• Conduct regular testing and validation of SOAR workflows to ensure effectiveness and efficiency.
• Stay up-to-date with the latest trends and technologies in cybersecurity and SOAR, and evaluate new tools and solutions for potential adoption.
• Provide mentorship and guidance to junior team members, fostering a culture of knowledge sharing and continuous learning.
• Document processes, workflows, and best practices to ensure consistency and compliance with industry standards.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field; Master’s degree preferred.
• 5+ years of experience in cybersecurity, with a focus on security operations and incident response.
• Proven experience with SOAR platforms (e.g., Splunk Phantom, Palo Alto Cortex XSOAR, IBM Resilient, etc.) and automation scripting (Python, PowerShell, etc.).
• Strong understanding of security frameworks, incident response methodologies, and threat intelligence.
• Familiarity with SIEM tools (e.g., Splunk, ArcSight, QRadar) and other security technologies.
• Excellent problem-solving skills and the ability to work under pressure in a fast-paced environment.
• Strong communication skills, both written and verbal, with the ability to convey complex technical concepts to non-technical stakeholders.
• Relevant certifications (e.g., CISSP, CISM, CEH, or equivalent) are a plus.
• Experience in coordinating work across multiple functions and be adept at building consensus across organizational and functional lines.
• Strong analytical skills, including data analysis, trend analysis, problem solving and project management skills.

Benefits

• Medical, dental, life, vision, wellness program, disability, 401(k), Employee Stock Purchase Plan, paid time off and tuition reimbursement.
• Flexible work arrangements and a focus on work-life balance.
• Discounts on Stanley Black & Decker tools and other partner programs.