Technical Lead-Cybersecurity (US - ALPHARETTA-GA-USA, US)
Get alerts for roles like this
More Technical Lead-Cybersecurity (US - ALPHARETTA-GA-USA, US) roles in United States — straight to your inbox. No account needed.
Applying to this role? Tailor your résumé to this job description in one click, then download it clean — no watermark, no subscription.
Job Description
Area(s) of responsibility Job Description: Automation / Orchestration / Security Engineer Fulltime Remote Position Overview The Automation / Orchestration / Security Engineer designs, builds, and maintains automation and orchestration solutions that improve security outcomes, reduce manual effort, and increase reliability across security operations and engineering.
This role partners with Security Operations, Incident Response, IT, and Platform/Cloud teams to integrate tools, standardize workflows, and implement measurable, auditable security automation.
This position is hands-on and requires strong engineering fundamentals, security domain knowledge, and an automation-first mindset. The engineer will build integrations, develop playbooks/runbooks, and help mature detection-to-response processes with a focus on scalability, safety, and governance.
Key Responsibilities
Own the design and delivery of security automation and orchestration capabilities that improve response time, consistency, and quality across security workflows. Develop and maintain SOAR playbooks for alert triage, enrichment, containment, and remediation.
Build and manage automation integrations with security tooling (SIEM, EDR/XDR, IAM, ticketing, vulnerability management, cloud security) using APIs, webhooks, and event-driven architectures.
Create reusable automation components (scripts, libraries, templates) with appropriate error handling, retries, logging, and observability. Collaborate with SOC analysts and Incident Response to translate procedures into automated runbooks; ensure safe execution with approval gates where needed.
Design automation with governance: role-based access controls, change management, auditability, and documentation. Partner with engineering and infrastructure teams to automate security controls and guardrails (policy-as-code, compliance checks, hardening, configuration drift remediation).
Support incident response by developing rapid automation for containment and evide