Security Automation Engineer

Blackpoint Cyber is the leading provider of world-class cybersecurity threat hunting, detection and remediation technology. Founded by former National Security Agency (NSA) cyber operations experts who applied their learnings to bring national security-grade technology solutions to commercial customers around the world, Blackpoint Cyber is in hyper-growth mode,  fueled by a recent $190m series C round. 

Why Blackpoint?  

Ready to give some hackers hell? On the Blackpoint Cyber Team, we win the unfair fight while helping others protect what’s most important to them. Simply put, our team takes out the adversaries before they see us coming. Join us today and help put the bad guys in their place for good.  

Blackpoint Cyber was built by former US Department of Defense and Intelligence security experts focused on stopping malicious tradecraft and safeguarding MSP operations. Our mission? Provide absolute and unified Managed Detection and Response services to organizations across the world.  

Company Culture  

On this team, we value high-quality execution, ownership, and strong morals. With us, principles are never tested, and we are proud to always do right by our customers. If you’re a driven professional with a passion for learning and contributing towards the best, then Blackpoint welcomes you. Our team is energetic and collaborative, maintaining a high-performance culture and enabling growth through overcoming challenges in the modern cyberthreat landscape.  

Key Responsibilities:

·        Security Automation Development:

o   Design, develop, and maintain security automation tools and scripts to enhance the SOC's operational efficiency and response capabilities.

o   Utilize Python and other scripting languages to create custom solutions for integrating and automating security processes.

·        API Integration and Report Automation:

o   Leverage various APIs to automate data retrieval and report generation, enhancing the SOC's analytical and reporting capabilities.

o   Work with internal and external data sources to streamline data aggregation and analysis.

·        Continuous Improvement and Innovation:

o   Regularly investigate attacks across the customer base to identify opportunities for improving detection logic and automation.

o   Stay updated with the latest cybersecurity trends and technologies to continually innovate and improve SOC processes.

·        Cross-functional Collaboration:

o   Collaborate with SOC analysts to understand their needs and develop automation solutions that support their workflows.

o   Work closely with other technical teams to integrate security automation tools with existing systems and platforms.

Qualifications:

• 4+ years of experience in coding, development, or scripting, with a specific focus on cybersecurity applications.

• Proven experience in security automation and tool management within a SOC environment.

• 3+ years of experience in an information security role, with a preference for experience in SOC, Threat Hunting, or DFIR.

• Extensive knowledge of data structures, algorithms, and data analysis techniques.

• Proficiency in leveraging APIs for data retrieval and automation.

• Familiarity with Elasticsearch, Kibana query languages, or similar technologies.

• Excellent communication skills for effectively summarizing and presenting findings and trends.

Technical Skills:

• Proficient in software such as n8n, tines, utilizing webhooks, and configuring tools like Hive or SOAR platforms.

• Experience in network/system administration, preferably in a cybersecurity context.

• Scripting experience with PowerShell is a plus.

• Familiarity with Power BI, Excel, or similar tools for data analysis and visualization.

Desirable:

• Bachelor’s Degree in Computer Science, Engineering, or a related technical discipline.

• Advanced skills in Kibana, including dashboard creation and data visualization.

• Background in network/system administration.

• Experience in Red Teaming or penetration testing.
  

Blackpoint Cyber welcomes and encourages applications from qualified individuals of all races,  colors, religions, sex, sexual orientation, gender identity or expression, national origin, age, marital  status, or any other legally protected status. We are committed to equality of opportunity in all  aspects of employment. 

We thank everyone for their interest, but only those candidates selected for an interview will be  contacted. 

Blackpoint Cyber welcomes and encourages applications