The Automation Analyst focuses on design, development, and maintenance of automation workflows for cybersecurity and IT operations, enhancing efficiency through automation tools.
The Automation Analyst will be responsible for designing, developing, and maintaining automation workflows that enhance efficiency across cybersecurity and IT operations. The role involves collaborating with various functional teams such as SOC, IR, VM, Cloud, and Run to identify repetitive manual processes and automate them using tools, scripts, and orchestration platforms.
This position is ideal for a motivated individual with a foundational background in scripting, automation frameworks, and a strong desire to drive process optimization through technology.
Key Responsibilities
Identify opportunities for automation across cybersecurity and IT operations workflows.
Design, build, and maintain automated solutions using SOAR, scripting languages, and APIs.
Collaborate with security and infrastructure teams to streamline alert triage, incident response, and remediation processes.
Develop reusable automation components, scripts, and connectors.
Maintain detailed documentation of automation logic, workflows, and playbooks.
Monitor and fine-tune automation performance to ensure reliability and scalability.
Work closely with cross-functional teams to ensure secure integration of automation solutions.
Ensure all automation processes align with internal security and compliance standards.
Required Skills & Qualifications
1–3 years of hands-on experience in IT or cybersecurity automation.
Strong understanding of Python, PowerShell, or Bash scripting.
Experience working with SOAR platforms (e.g., Splunk SOAR, Palo Alto Cortex XSOAR, Microsoft Sentinel, ServiceNow, or similar).
Basic understanding of APIs, JSON, and RESTful integrations.
Exposure to security tools (SIEM, EDR, DLP, vulnerability management, etc.) and their data flows.
Understanding of process automation principles and orchestration frameworks.
Good analytical and troubleshooting skills.
Excellent communication, documentation, and collaboration abilities.
Preferred Skills (Good to Have)
Familiarity with CI/CD pipelines and DevSecOps concepts.
Experience in automation testing frameworks.
Knowledge of cloud automation (Azure Logic Apps, AWS Lambda, etc.).
Exposure to ITSM tools like ServiceNow or Jira for workflow automation.
Basic understanding of cybersecurity operations and event response lifecycles.
Soft Skills
Strong problem-solving mindset and eagerness to learn new technologies.
Ability to manage multiple tasks and priorities in a fast-paced environment.
Team player with a proactive and ownership-driven approach.
Excellent written and verbal communication skills.
Education
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Relevant certifications (e.g., CompTIA Security+, Microsoft Power Automate, Splunk SOAR Certified Automation Developer, or Python-related credentials) are a plus.
