A

AeroVironment

Defense technology and unmanned aerial systems

Cybersecurity Automation Engineer

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-time$111.5k - $189.5k

About the Job

Requirements

  • Three or more years of experience in security engineering, security automation, software development, or a related technical discipline.
  • Demonstrated experience developing and maintaining automation solutions using Python, PowerShell, or comparable languages.
  • Practical experience integrating enterprise platforms through APIs, including authentication, JSON data handling, pagination, and error handling.
  • Working knowledge of security operations, incident response processes, and common endpoint, identity, network, and cloud threats.
  • Experience with SIEM or SOAR platforms and workflow orchestration tools.
  • Familiarity with Git, code review, testing, and secure development practices.
  • Ability to troubleshoot complex workflows and dependencies across multiple systems.
  • Strong written and verbal communication skills, including the ability to explain technical solutions to nontechnical stakeholders.
  • Ability to prioritize work, manage competing requirements, and independently deliver maintainable solutions.
  • Bachelor's degree in cybersecurity, computer science, information technology, or a related field, or equivalent practical experience.

Responsibilities

  • Design, build, and maintain automation workflows across SIEM, SOAR, endpoint security, identity, vulnerability management, cloud, and ticketing platforms.
  • Develop integrations using REST APIs, web-hooks, SDKs, and scripting languages such as Python and PowerShell.
  • Automate alert enrichment, investigation support, case creation, evidence collection, notifications, and incident response actions.
  • Engineer workflows that correlate information across platforms to improve visibility, reduce manual effort, and support faster security decisions.
  • Partner with security analysts and incident responders to identify automation opportunities and translate operational playbooks into technical workflows.
  • Automate vulnerability management activities, including asset enrichment, remediation ticket creation, ownership assignment, escalation, and closure validation.
  • Build appropriate safeguards into automated actions, including approval requirements, access restrictions, validation checks, and rollback procedures.
  • Implement secure authentication, secrets management, least-privilege access, and audit logging for integrations and service accounts.
  • Maintain automation code through version control, peer review, testing, documentation, and established change management processes.
  • Monitor automation health, troubleshoot failures, and account for API limits, platform changes, retries, and exception handling.
  • Document integration architectures, data flows, dependencies, operating procedures, and troubleshooting guidance.
  • Measure automation effectiveness through time saved, execution reliability, reduced manual handling, and improved response times.
  • Support security control implementation and audit readiness by automating evidence collection and reporting.
  • Identify and implement opportunities to use artificial intelligence to enhance security automation, including alert enrichment, investigation summaries, incident prioritization, and response recommendations.
  • Integrate AI capabilities into security workflows with appropriate human oversight, data protection, output validation, and audit logging.
  • Evaluate AI-assisted workflows for accuracy, reliability, and measurable improvements in analyst efficiency and response time.

Desired Qualifications

  • Experience with platforms such as Microsoft security technologies, Azure Logic Apps, Azure Functions, Microsoft Intune, Palo Alto Networks, or Jira.
  • Experience integrating AI capabilities, large language models, or AI-enabled security tools into automation workflows, with an understanding of their limitations and secure use.
  • Experience supporting Azure Government, Microsoft GCC High, or other regulated enterprise environments.
  • Familiarity with KQL, cloud automation, CI/CD pipelines, and infrastructure as code.
  • Experience implementing automated response actions with human approval and operational safeguards.
  • Familiarity with NIST incident response guidance, MITRE ATT&CK, CMMC, and NIST SP 800-171.

About the Company

AeroVironment

Defense technology and unmanned aerial systems

AeroVironment designs and builds robotic systems for defense across air, land, and space, including small reconnaissance drones, high-altitude aircraft, and loitering munitions. These products work by carrying sensors and control software that allow autonomous or semi-autonomous missions, with real-time data collection, and, for weapons-enabled models, a payload and deployment mechanism for precision strikes. The company differentiates itself through a growing, multi-domain defense portfolio built via acquisitions, creating an integrated platform that combines drones with space tech, counter-UAS, and other defense capabilities. Its goal is to become a comprehensive defense-technology provider that can win large, long-term contracts by offering coordinated, autonomous systems across multiple domains.

Company size
1,001-5,000
Company stage
IPO
Headquarters
Crystal City, Virginia
Founded
1971

Recently Posted Jobs

Explore more opportunities at AeroVironment

See more jobs