Security Automation Engineer

Security Automation Engineer

Remote - European Union

12-month Contract. Company based in Helsinki, Finland.

Our client, a growing Cybersecurity SaaS company based in Helsinki , is looking for a Security Automation Engineer to develop automated security workflows, detection capabilities, and cloud security integrations.

You'll work at the intersection of CyberSecurity, Software Engineering, and Cloud Infrastructure , building practical tools that improve threat detection, investigation, and incident response across cloud environments.

What You'll Work On

• Build security automation tools and workflows using Python

• Develop and improve threat detection capabilities across AWS environments

• Integrate security events and telemetry into SIEM platforms

• Design and automate investigation and response workflows using SOAR tools

• Build integrations between security platforms using REST APIs

• Develop detection rules and automated alert-enrichment processes

• Automate recurring security operations and incident-response tasks

• Use Terraform to deploy and manage security-related cloud infrastructure

• Improve monitoring and visibility across cloud workloads and services

• Reduce alert noise and improve detection accuracy

• Develop automated remediation workflows with appropriate safeguards

• Support investigation of suspicious activity and security incidents

• Improve security logging, event correlation, and alert prioritisation

• Collaborate with Security Operations, Cloud, and Platform Engineering teams

Core Skills

• 3+ years in Security Engineering, Security Automation, Detection Engineering, SecOps, or a similar role

• Python scripting and automation

• AWS and cloud security fundamentals

• SIEM platforms and security event analysis

• SOAR platforms or automated incident-response workflows

• REST APIs and security-tool integrations

• Terraform / Infrastructure as Code

• Detection engineering principles

• Experience working with security logs, alerts, and incident investigations

Nice to Have

AWS GuardDuty / CloudTrail / Security Hub

Microsoft Sentinel / Splunk / Elastic Security

Cortex XSOAR / Tines / Shuffle

Sigma detection rules

MITRE ATT&CK

Cloud detection and response

Threat hunting

Incident-response automation

AWS Lambda / EventBridge

GitHub Actions / GitLab CI

Docker / Kubernetes

Infrastructure security monitoring

Detection-as-Code

Security telemetry and log pipelines