SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
CrowdStrike is seeking an Automation Engineer II to join the Falcon Complete Managed Detection & Response (MDR) team. In this role, you will develop expertise in scaling security operations through automation and AI, building SOAR playbooks, AI-powered workflows, and scripted solutions to maximize analyst efficiency.
Key responsibilities include:
**Automation Development:** Build and maintain security automation workflows and playbooks in SOAR platforms for investigation, triage, and response. Develop PowerShell and Python scripts for security enrichment, remediation, and forensic functions. Integrate SIEM queries into automated workflows and optimize performance by identifying bottlenecks.
**AI Integration:** Conduct end-to-end testing of automated and AI-powered workflows before production deployment. Build complex API integrations connecting security platforms, data sources, and AI services. Integrate LLM APIs and AI services into workflow pipelines to enhance detection and response capabilities. Evaluate emerging AI tools and frameworks for MDR security operations.
**Collaboration & Innovation:** Maintain version control of automation scripts using Git. Support initiatives to improve operational efficiency and contribute ideas for analyst productivity. Stay current with emerging technologies in SOAR, automation, and AI.
**Required Experience:**
- 2+ years in automation, scripting, or cybersecurity
- Proficiency with PowerShell for security investigation and response
- Working knowledge of Python for automation and API integration
- Experience with SOAR workflow automation platforms
- Hands-on REST API integration experience
- Familiarity with event-driven and webhook-triggered automation patterns
- Working knowledge of JavaScript or expression-based scripting
- Basic understanding of SIEM query languages
- Experience with JSON and Regular Expressions
- Understanding of incident detection and response workflows in SOC/MDR environments
- Version control systems experience (Git, GitHub, GitLab, Bitbucket)
- Strong analytical and communication skills
- Proven experience utilizing AI technologies to enhance workflows and efficiency
**Bonus Skills:** Falcon SOAR platform experience, LogScale experience, Docker/containerized environments, secrets management, AI workflow frameworks, cybersecurity frameworks (NIST, MITRE ATT&CK), cloud platforms (AWS, Azure, GCP), or prior SOC experience.
