← All roles

Platform Security Automation Engineer

TENEX.AI· Engineering
Apply on company site
Hybrid (San Jose, CA), Hybrid (Kansas City Metro)Full-timePosted 2w ago

About the role

Platform Security Automation Engineer responsible for the integration layer between AI agents and security platforms, deploying and maintaining SIEM/SOAR/EDR environments, building production-grade software, and creating automated detection and response workflows with strong safety guardrails.

Responsibilities

  • Operate security platforms across vendors: Deploy, configure, and maintain sandboxes of SIEM, SOAR, and EDR environments across vendors such as CrowdStrike, SentinelOne, Microsoft Defender, Splunk, Microsoft Sentinel, and Google SecOps. Manage prevention policies, host groups, custom IOAs, and exclusions on EDR platforms, detection content on SIEM platforms, and connectors on SOAR platforms.
  • Resolve platform issues: Troubleshoot and resolve EDR agent problems across our environments, managing performance impacts, kernel or driver conflicts, upgrade rollouts, and false positive tuning.
  • Build production software: Develop, test, and deploy production Python services (not just scripts). Manage the full lifecycle including APIs, workers, queues, tests, CI, and containers.
  • Automate detection and response: Partner with other teams in engineering to build automated containment or remediation workflows, including host isolation, process kills, file quarantine, account disabling, and ticket creation.
  • Design safety guardrails: Architect strict guardrails on automated response actions—approval thresholds, allow lists for critical hosts, rate limits on isolation actions, audit trails, and safe release or rollback paths.
  • Own the platform in production: End-to-end ownership of the platform's reliability and latency outcomes; participate in on-call rotation for security tooling.
  • Build internal tooling: Create and maintain tools utilized by other teams, ensuring observability through logging, metrics, or alerting.

Qualifications

  • Deep, hands-on experience operating multiple SIEM/SOAR/EDR platforms
  • Proven software engineering experience building and maintaining production Python services and APIs
  • Experience integrating with complex vendor APIs and managing auth, rate limits, and retries
  • Demonstrated experience building automated detection and response workflows with carefully designed safety guardrails
  • Track record of taking end-to-end production ownership of a platform, rather than just a component

Skills

Required:SIEM/SOAR/EDR platform operationPython production services

Benefits

  • Competitive salary and benefits package
  • Culture of growth and development with opportunities to expand knowledge in AI, cybersecurity, and emerging technologies
  • Opportunity to work with cutting-edge AI-driven cybersecurity technologies and Google SecOps solutions
Last updated Oct 15, 2026. Interested? Apply on the company site.

About TENEX.AI

10x Your Cyber Security With Ai

With a focus on precision and scalability, TENEX delivers comprehensive cyber security solutions that evolve with your organization.

cyber securityAI-drivenAutomationManaged Detection and ResponseThreat ManagementIncident ResponseSecurity Automation
Company profileWebsite

More open roles at TENEX.AI