Full-Time
Security Automation Engineer 1
Security
Updated on 9/10/2026
CBTS
1,001-5,000 employees
North American IT services provider
No salary listed
Chennai, Tamil Nadu, India
In Person
Bachelor's
 Cybersecurity (1) |
|---|
Get referred to CBTS
See people who can refer or advise you
- At least 2 years of experience as a Security Operations Center analyst, with hands-on familiarity with alert triage, threat investigation, and escalation decision-making.
- At least 1 year of experience working with a Security Orchestration, Automation, and Response platform.
- A four-year college degree resulting in a bachelor's degree, or equivalent practical experience.
- One or more relevant certifications, such as Palo Alto Cortex, CompTIA Security+, CompTIA CySA+, GIAC GSEC, or EC-Council CEH.
- Understanding of cybersecurity principles, common attack techniques, and Security Operations Center operational workflows.
- Experience with Security Information and Event Management, Security Orchestration, Automation, and Response, Endpoint Detection and Response/Extended Detection and Response, threat intelligence, endpoint protection, and email security technologies.
- Familiarity with Security Orchestration, Automation, and Response playbook development.
- Understanding of common detection use cases including phishing, endpoint compromise, identity threats, and network anomalies.
- Proficiency in Python for scripting and automation tasks.
- Comfort working with REST APIs, regular expressions, and JSON to build and troubleshoot platform integrations.
- Familiarity with Windows, macOS, and Linux environments.
- Ability to work independently, manage time effectively, and stay productive in a remote environment.
- Ability to collaborate in technical conversations and troubleshooting sessions.
- High attention to detail to ensure automation logic performs accurately under varied conditions.
- Commitment to continuous learning and staying current with evolving threats, detection techniques, and automation capabilities.
- Ability to adapt playbook logic as the threat landscape and tool stack change over time.
- Develop, test, and maintain automated playbooks and integrations across Palo Alto XSOAR and Cortex XSIAM.
- Collaborate with Security Operations Center analysts to identify manual, repetitive workflows and translate them into reliable automation.
- Integrate security tools and platforms to support cohesive, automated response workflows.
- Evaluate playbook performance, identify logic gaps, and iterate based on analyst feedback and operational data.
- Troubleshoot integration and automation failures.
- Document playbook logic and contribute to design discussions across distributed teams.
- Senior analyst experience is preferred.
- Palo Alto XSIAM or XSOAR experience is strongly preferred.
CBTS provides IT services such as networking, IT support, unified communications, and cloud services. It operates by leveraging Cincinnati Bell/altafiber’s fiber network and enterprise relationships to deliver managed IT solutions, with delivery teams across the United States, Canada, and India. CBTS has grown through strategic acquisitions and scale, including OnX Enterprise Solutions and expansion under parent ownerships, which helped it become a broader North American IT services provider. The company differentiates itself through its deep fiber infrastructure footprint, enterprise partnerships, and a global delivery model that supports complex IT workloads for mid-market to large clients. Its goal is to accelerate growth, expand market access, and invest in technology and talent to offer comprehensive technology services and solutions across North America.
Company Size
1,001-5,000
Company Stage
N/A
Total Funding
N/A
Headquarters
Cincinnati, Ohio
Founded
1994
Get referred to CBTS
See people who can refer or advise you
Simplify's Take
What believers are saying
- September 1, 2026 Forge Agents extends CBTS’s AI push into mid-market automation.
- June 25, 2026 CBTS reported 3,000+ clients and an 82 NPS.
- August 11, 2026 PTaaS and hardware buy-hold services monetize security and infrastructure demand.
What critics are saying
- Accenture, IBM, SHI, and Coastal squeeze CBTS on price, talent, and delivery.
- Forge AI and Forge Agents launched in 2026, so revenue conversion remains unproven.
- A TowerBrook exit without durable software differentiation leaves CBTS vulnerable to commoditized-services compression.
What makes CBTS unique
- December 2024 TowerBrook acquisition made CBTS a standalone IT services platform.
- CBTS spans 3,000+ North American clients and 2,300+ employees across U.S., Canada, India.
- Forge AI and Forge Agents bundle advisory, security, infrastructure, and deployment into one offer.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Flexible Work Hours
Growth & Insights and Company News
6 month growth
↑ 9%1 year growth
↑ 9%2 year growth
↑ 8%CBTS, a North American technology services company, has launched Forge Agents, a platform that builds enterprise-grade AI agents in days from plain-language descriptions. The service targets mid-market organisations facing security and governance challenges in AI deployment. Chief Technology Officer Mark Giles said mid-market companies need partners who can deliver the entire AI agent stack. The platform offers board-level defensibility with access controls and auditable decision trails, whilst running on existing models across Anthropic, Google, AWS, Cisco, or on-premises systems. CBTS uses 187 pre-built artifacts and 34 cross-industry blueprints to accelerate deployment. The company deployed internal agents across 2,300 employees and achieved full ROI within four months. Forge Agents supports private or sovereign AI deployment models for organisations handling sensitive data and operates across regulated industries.
CBTS launches Forge Agents to build custom AI agents in days. Information technology services company CBTS Technology Solutions LLC today launched Forge Agents, a platform that turns a plain-language description of a job into a working artificial intelligence agent and then runs it under enterprise security controls. Midmarket companies are the target buyer. They answer to the same regulators and sit through the same security reviews as large enterprises, CBTS argues, without the engineering bench to satisfy either. Accountability tends to be scattered as well. The company cited a June report from Forrester Research Inc. that found governance responsibility is split across seven or more roles with no single function owning more than 28%. And 54% of enterprise AI decision-makers saying their technology organization is leading the AI effort. Building an agent starts with a description of the work in ordinary language. Forge Agents assembles it from a library of 187 prebuilt artifacts and 34 cross-industry blueprints, which CBTS said gets agents into production in days. Clients can start with a single use case, pay for what they consume, then expand once something works. Nothing gets ripped out to make room. Agents run on the model and cloud tenancy a client already pays for, spanning Anthropic PBC, Google LLC, Amazon Web Services Inc. and Cisco Systems Inc., or on hardware in the client's own data center. Access controls, intake gates and auditable decision trails come with the platform, along with explainable outputs. CBTS calls that board-level defensibility. Sensitive workloads can sit inside a client's own tenancy, backed by CBTS managed hosting and network security, with encryption key management and data lineage governance staying on the buyer's side of the line. Model choice is left open too, across proprietary, third-party and open-source systems, so a buyer can pick on cost or data residency. Mark Giles, chief technology officer of CBTS, said midmarket organizations need one partner capable of delivering and managing the entire agent stack. Most already own capable platforms, he said. What they lack is "the engineering to run agents securely, connect data to workflows, and prove ROI." CBTS has been running the software on itself. Agents are in use across its customer experience, finance, operations and workforce functions, with more than 2,300 employees working alongside them. Security policy, metered spend and usage analytics sit in one view that tracks down to individual users, skills and tokens. Payback on the internal rollout came within three months, according to CBTS. Monitoring, accuracy reporting and a human-in-the-loop supervisor layer are available as managed services once an agent is live. Forge Agents is available now. The platform extends Forge AI, the advisory and infrastructure practice CBTS introduced in March. Image: siliconangle/gpt image 2. A message from John Furrier, co-founder of SiliconANGLE: Support its mission to keep content open and free by engaging with theCUBE community. Join theCUBE's Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities. * 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more * 11.4k+ theCUBE alumni - Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network Are you an AWS customer? Support SiliconANGLE financially by buying your AWS services from its Marketplace portal page and links: https://siliconangle.com/aws-marketplace/. About SiliconANGLE Media. SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios - with flagship locations in Silicon Valley and the New York Stock Exchange - SiliconANGLE Media operates at the intersection of media, technology and AI. Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Its new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.
CBTS has launched Penetration Testing as a Service (PTaaS), using autonomous penetration testing technology from Horizon3.ai's NodeZero platform. The service provides continuous security validation rather than traditional annual assessments, addressing the challenge of rapidly expanding attack surfaces from cloud environments, SaaS applications, and AI systems. The service combines automated penetration testing across live production environments with expert review from CBTS security professionals. NodeZero autonomously tests for exploitable risks and identifies how vulnerabilities could be chained together into attack paths. CBTS experts then validate findings and provide customer-specific remediation guidance. Organizations can select testing frequencies ranging from daily to quarterly. The service aims to help security teams prioritize remediation based on validated exploitability within their specific environment, supporting Continuous Threat Exposure Management programmes as vulnerability exploitation becomes attackers' primary entry method.
CBTS named to 2026 CRN Solution Provider 500 List. Recognition reflects the company's scale and technical depth across AI, cybersecurity, and infrastructure as enterprise and midmarket demand accelerates. News summary. * Annual CRN ranking recognizes North America's largest technology solution providers by revenue. * CBTS serves more than 3,000 enterprise and midmarket clients across the U.S. and Canada with services spanning AI, data, applications, platforms, cybersecurity, digital workplace, and infrastructure. CBTS announced it has been ranked a top company on the 2026 Solution Provider 500 List by CRN(R), a brand of The Channel Company. It marks the company's 11th consecutive year on the list. The annual Solution Provider 500 list serves as a benchmark of leading IT services companies across the technology channel. The solution providers on this list are key influencers driving growth across the IT industry through business leadership, technical expertise, and service delivery. CBTS earned its place on the list through consistent execution across the full technology stack including advisory, engineering, deployment, and managed operations. Jun 15, 2026 Prev Next 1 of 43,157 The company serves enterprise and midmarket clients through infrastructure modernization, cloud adoption, cybersecurity transformation, and now AI. CBTS works with more than 3,000 clients across the United States and Canada, including Fortune 500 companies and organizations in highly regulated industries where technology failures are not an option. "The organizations we serve are under real pressure to move AI into production, tighten security, and do both without disrupting the business that's running today," said CBTS CEO Kristin Russell. "It takes a partner with depth across the full stack, accountability across the full lifecycle, and the track record to back it up. CBTS is built for exactly this moment." Recognized across the technology ecosystem in 2026 This recognition follows a series of 2026 awards across the CBTS partner ecosystem and core service areas including Cisco Preferred Partner status for Cloud and AI Infrastructure, Collaboration, Networking, Security, and Services. HPE also awarded CBTS Triple Platinum Plus status, its highest designation within the HPE Partner Ready Vantage Program, recognizing depth across compute, hybrid cloud, networking, and AI-ready infrastructure. The company also earned repeat recognition on the CRN 2026 Tech Elite 250 and CRN 2026 MSP Elite 150. Together, these awards reinforce technical depth, managed services scale, and the ability to support complex client environments across AI, cybersecurity, cloud, infrastructure, and operations. "The Solution Provider 500 list highlights those companies generating the highest revenue through leadership in business and service innovation," said Jennifer Follett, Vice President, U.S. Content, Executive Editor at CRN, The Channel Company. "This recognition highlights those organizations that consistently demonstrate agility and sustained growth amid rapidly evolving industry demands and technological change. C************** to every company that earned a well-deserved place on this year's Solution Provider 500."
CBTS has launched its Hardware Buy & Hold Program, allowing organisations to purchase IT infrastructure at current prices and defer delivery until deployment. The managed inventory offering aims to help companies mitigate rising hardware costs and supply chain uncertainty. According to Forrester Research, organisations face 20% cost increases above historical norms for AI-optimised infrastructure. CBTS data shows 64GB RDIMM memory prices rose 142% in four months, whilst a 10-node cluster increased 115% in the same period. The programme targets server and storage configurations, where pricing pressure has been most acute. CBTS holds purchased hardware in inventory until clients are ready for delivery, separating procurement decisions from deployment timelines. The service is currently being previewed with select US clients.