Security Automation Engineer (Intermediate) at Nedbank

Job purpose

• We are seeking a highly skilled Security Automation Engineer with a strong background in security and proficiency in Python.
• The ideal candidate will have experience with Security Orchestration, Automation, and Response (SOAR) platforms.
• This role is responsible for designing, implementing, and maintaining security automation solutions to enhance our security operations. 

Job responsibilities

• Design, develop, and maintain security automation scripts and tools using Python. 
• Integrate security tools and systems with SOAR platforms to automate incident response and threat detection processes. 
• Collaborate with security analysts and incident responders to identify automation opportunities and improve security workflows. 
• Develop and maintain documentation for security automation processes and tools. 
• Collaborate with IT, compliance, and development teams to ensure automation aligns with business objectives and regulatory requirements. 
• Stay up-to-date with the latest security trends, tools, and technologies to continuously improve security automation capabilities. 

Required skills and experience

• Python Programming: proficient in writing clean, modular, and reusable code for automation and integration tasks.
• Excellent problem-solving and analytical skills.
• Strong communication and collaboration skills.
• Automation mindset: ability to identify repetitive tasks and design scalable solutions.
• System integration and development of larger projects.
• Experience in designing and developing programs that integrate multiple technologies.

Essential qualifications - NQF Level

• Matric / Grade 12 / National Senior Certificate
• Advanced Diplomas/National 1st Degrees

Desirable (not required)

• Experience with SOAR platforms (e.g., Cortex XSOAR, Splunk SOAR, Swimlane, etc.). 
• Familiarity with SIEM technologies such as Elastic Stack or others. 
• Knowledge of data handling techniques including ingestion, parsing, and transformation. 
• Exposure to data modelling concepts and how structured data supports security analytics. 
• Explore and integrate AI/ML capabilities to enhance automation workflows and threat detection. 
• Solid understanding of security principles, practices, and technologies:  Understanding of SOC workflows, incident response, and threat detection. 
• Experience integrating with APIs and third-party security tools. 

Minimum experience level

• 5 years of experience in Information Security or related field

Technical / Professional knowledge

• Administrative procedures and systems
• Data analysis
• Governance, Risk and Controls
• Principles of project management
• Relevant regulatory knowledge
• Relevant software and systems knowledge
• System Development Life cycle(SDLC)
• Information Security policies and procedures
• Business writing skills
• Networking Knowledge

Behavioural competencies

• Applied Learning
• Communication
• Collaborating
• Customer Focus
• Initiating Action
• Managing Work
• Technical/Professional Knowledge and Skills