Security Integration and Automation Engineer

W2 Contract

Pay Rate: $80 - $120 per hour

Location: Redwood City, CA - Hybrid Role

Job Summary:

We are seeking a Cybersecurity Integration & Automation Engineer to architect and scale integrations across a modern, best-of-breed security stack. This role is responsible for turning a diverse set of security tools into a unified, automated, and intelligence-driven platform.

Duties and Responsibilities:

• Own integration architecture across the security ecosystem, leveraging APIs, webhooks, and event-driven patterns.
• Build and scale automation workflows and playbooks using Tines (SOAR).
• Orchestrate cross-platform response actions (endpoint isolation, identity containment, SaaS risk mitigation).
• Correlate signals across endpoint, identity, network, SaaS, and data to improve detection fidelity.
• Integrate and normalize telemetry into SIEM for analytics and threat hunting.
• Lead integration across tools, including:
  • CrowdStrike, Darktrace, Delinea
  • Zscaler, Meraki
  • Abnormal AI, Cyera, Valence, Oasis
  • Island, Jamf, Intune
• Enable security visibility and controls across Azure and AWS.
• Leverage agentic coding platforms and AI-assisted development tools to accelerate integration, automation, and playbook creation.
• Drive automation-first operations to reduce manual effort and improve MTTR.
• Partner with Security, Cloud, and IT teams; mentor engineers and influence best practices.
• Drive a fully integrated security ecosystem with minimal silos.
• Increase automation and reduce operational overhead.
• Improve detection quality and response speed.
• Enable scalable, data-driven security operations.

Requirements and Qualifications:

• Strong experience with API integrations (REST, webhooks, JSON).
• Hands-on expertise with SOAR (Tines preferred).
• Experience using agentic coding platforms / AI-assisted development tools (e.g., code generation, workflow automation, or LLM-driven tooling).
• Proficiency in Python, JavaScript, or similar.
• Experience with SIEM pipelines, log normalization, and data integration.
• Solid background across multiple domains:
  • Endpoint (EDR/XDR)
  • Identity / PAM / NHI
  • Network & SSE
  • SaaS Security (SSPM)
  • Data Security (DLP/DSPM)
• Experience with Azure and/or AWS.
• Strong understanding of attack chains, threat detection, and zero-trust models.

Preferred Qualifications:

• Experience with security data lakes.
• Event-driven or streaming architectures (e.g., Kafka).
• Building custom connectors or integration frameworks.
• Experience operationalizing AI/LLM-driven security or automation use cases.

Bayside Solutions, Inc. is not able to sponsor any candidates at this time. Additionally, candidates for this position must qualify as a W2 candidate. 

Bayside Solutions, Inc. may collect your personal information during the position application process. Please reference Bayside Solutions, Inc.'s CCPA Privacy Policy at www.baysidesolutions.com.