Principal Security Automation Engineer (Tines)
We are seeking a highly skilled and experienced Senior Security Automation Engineer to lead the design, implementation, and optimization of security automation workflows using the Tines platform. This role requires deep technical expertise in security orchestration, cloud architecture, and API integrations, as well as experience working closely with Security Operations Centers (SOC), Incident Response (IR) teams, and cross-functional stakeholders. The ideal candidate will bring a strong security engineering background, hands-on experience with modern automation platforms, and a strategic mindset to drive scalable and secure automation initiatives.
Key Responsibilities
- Architect, implement, and maintain advanced automation workflows using Tines.
- Collaborate with SOC and IR teams to identify high-impact use cases for automation.
- Integrate Tines with enterprise systems including EDR, SIEM, threat intelligence platforms, and cloud services.
- Lead secure integration of Tines with SSO, credential vaults, and external repositories.
- Design and configure secure connectivity solutions (e.g., Cloudflare tunnels, VPNs) for hybrid environments.
- Develop and maintain orchestration stories across platforms such as: CrowdStrike, Tanium, Splunk, Anvilogic, ThreatQ, AWS, and Azure.
- Write, test, and debug Python-based automation logic.
- Analyze Tines logs and metrics to optimize performance and reliability.
- Create and maintain technical documentation, runbooks, and architectural diagrams.
- Engage with stakeholders across security, infrastructure, and application teams to gather requirements and align automation efforts with business goals.
- Ensure all automation workflows adhere to enterprise security policies and change management processes.
Minimum Years of Experience
8 Required Qualifications
- 8+ years of experience in cybersecurity, with at least 3+ years in a security automation or engineering role.
- Proven experience working with SOC and/or Incident Response teams to operationalize automation.
- Hands-on experience with Tines or similar SOAR platforms (e.g., Splunk SOAR, Palo Alto XSOAR).
- Strong programming skills in Python; experience with Git and CI/CD pipelines.
- Deep understanding of REST APIs, webhooks, and secure API integrations.
- Experience with cloud platforms (AWS, Azure, or GCP), including automation and security architecture.
- Familiarity with AI/ML integrations (e.g., AWS Bedrock, OpenAI APIs) is a plus.
- Experience configuring secure tunnels (e.g., Cloudflare, SSH, VPN) for hybrid environments.
- Strong knowledge of security frameworks and best practices (e.g., NIST, MITRE ATT&CK).
- Excellent communication skills and ability to translate technical concepts for non-technical stakeholders.
- Experience with Agile/Scrum methodologies and tools like Jira and Confluence.
Desired Qualifications
- CISSP, GIAC, or equivalent security certification.
- Tines certifications (both entry-level and advanced preferred).
- AWS Certified Security – Specialty or equivalent cloud security certification.
Skills
- Automation
- Influence
- Result Orientation
- Stakeholder Management
- Technical Strategy Development
- Application Development
- Architecture
- Business Acumen
- Risk Management
- Solution Design
- Agile Practices
- Analytical Thinking
- Collaboration
- Data Management
- Solution Delivery Process
Bank of America and its affiliates consider for employment and hire qualified candidates without regard to race, religious creed, religion, color, sex, sexual orientation, genetic information, gender, gender identity, gender expression, age, national origin, ancestry, citizenship, protected veteran or disability status or any factor prohibited by law, and as such affirms in policy and practice to support and promote the concept of equal employment opportunity, in accordance with all applicable federal, state, provincial and municipal laws. The company also prohibits discrimination on other bases such as medical condition, marital status or any other factor that is irrelevant to the performance of our teammates.