Security Integration and Automation Engineer

Security Integration and Automation Engineer

W2 Contract

Pay Rate: $80 - $120 per hour

Location: Redwood City, CA - Hybrid Role

Job Summary:

We are seeking a Cybersecurity Integration & Automation Engineer to architect and scale integrations across a modern, best-of-breed security stack. This role is responsible for turning a diverse set of security tools into a unified, automated, and intelligence-driven platform.

Duties and Responsibilities:

• Own integration architecture across the security ecosystem, leveraging APIs, webhooks, and event-driven patterns.
• Build and scale automation workflows and playbooks using Tines (SOAR).
• Orchestrate cross-platform response actions (endpoint isolation, identity containment, SaaS risk mitigation).
• Correlate signals across e ndpoint, identity, network, SaaS, and data to improve detection fidelity.
• Integrate and normalize telemetry into SIEM for analytics and threat hunting.
• Lead integration across tools, including:
• CrowdStrike, Darktrace, Delinea
• Zscaler, Meraki
• Abnormal AI, Cyera, Valence, Oasis
• Island, Jamf, Intune
• Enable security visibility and controls across Azure and AWS.
• Leverage agentic coding platforms and AI-assisted development tools to accelerate integration, automation, and playbook creation.
• Drive automation-first operations to reduce manual effort and improve MTTR.
• Partner with Security, Cloud, and IT teams; mentor engineers and influence best practices.
• Drive a fully integrated security ecosystem with minimal silos.
• Increase automation and reduce operational overhead.
• Improve detection quality and response speed.
• Enable scalable, data-driven security operations.

Requirements and Qualifications:

• Strong experience with API integrations (REST, webhooks, JSON).
• Hands-on expertise with SOAR (Tines preferred).
• Experience using agentic coding platforms / AI-assisted development tools (e.g., code generation, workflow automation, or LLM-driven tooling).
• Proficiency in Python, JavaScript, or similar.
• Experience with SIEM pipelines, log normalization, and data integration.
• Solid background across multiple domains:
• Endpoint (EDR/XDR)
• Identity / PAM / NHI
• Network & SSE
• SaaS Security (SSPM)
• Data Security (DLP/DSPM)
• Experience with Azure and/or AWS.
• Strong understanding of attack chains, threat detection, and zero-trust models.

Preferred Qualifications:

• Experience with security data lakes.
• Event-driven or streaming architectures (e.g., Kafka).
• Building custom connectors or integration frameworks.
• Experience operationalizing AI/LLM-driven security or automation use cases.

Desired Skills and Experience

Cybersecurity integration architecture, REST APIs/webhooks/JSON, Python/JavaScript, Tines SOAR workflows and playbooks, automated incident response and containment, SIEM pipelines and log normalization, telemetry correlation and threat hunting, EDR/XDR, identity security/PAM/NHI, network security/SSE, SaaS security/SSPM, data security/DLP/DSPM, CrowdStrike/Darktrace/Delinea, Zscaler/Meraki, Abnormal AI/Cyera/Valence/Oasis, Island/Jamf/Intune, Azure/AWS security, attack chains and zero trust, security data lakes, event-driven/streaming architectures/Kafka, custom connectors and integration frameworks, agentic coding and AI-assisted development, AI/LLM security automation, MTTR improvement, cross-functional collaboration and engineering mentorship

Bayside Solutions, Inc. is not able to sponsor any candidates at this time. Additionally, candidates for this position must qualify as a W2 candidate.

Bayside Solutions, Inc. may collect your personal information during the position application process. Please reference Bayside Solutions, Inc.'s CCPA Privacy Policy at www.baysidesolutions.com.