Full Time

Security Automation Engineers - Elastic - United States

Elastic

United States
Posted 11 days ago

Home / Senior Response Automation Engineer - Information Security Senior Response Automation Engineer -

Information Security Distributed Locations: United States Apply Now Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic's complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role: As a Senior Response Automation Engineer at Elastic you will work to enhance and maintain the workflows supporting Elastic front-line defenders, assisting the team delivering safe and secure products and services to our customers, users, and fellow Elasticians. Currently, the Threat Detection and Response Team heavily relies on automation - we have developed many integrations and intelligent workflows to provide alert context, take action automatically, and more. This has resulted in significant time savings and efficiencies. Our ability to continue to enhance existing workflows and develop new ones to take us to the next level in our SOC-less journey. In this role, you will be responsible for understanding, maintaining, and improving threat detection and response processes, working on automations that support alert triage through management of response cases. If doing all of this with the Elastic Stack excites you, then we'd love to meet you! What You Will Be Doing: Drive the full lifecycle of automation development, from design to maintenance, to significantly advance our threat detection and response capabilities. Optimize and automate core SOC/IR analyst