Security Automation Engineer

Sofia Stars is a fast-growing global service provider that guides high-growth businesses to success. Our range of tailored solutions includes R&D, Customer Support, Sales, KYC, Risk, and Anti-Fraud services. We make every connection shine with fresh tech and cultural understanding. We are looking for a Security Automation Engineer who will focus primarily on building internal services and automation solutions across security and risk management domains.  Role Requirements: * Strong hands-on experience with Python (mid-level or higher, able to work independently); * Proven experience building automation services in security and/or risk management domains; * Solid experience with Bash / Shell scripting; * Experience with Git workflows (PRs, CI usage, version control best practices); * AWS (must-have): IAM (roles, policies, AssumeRole), EC2, S3, Lambda, VPC (networking fundamentals), experience with multi-account environments; * Infrastructure & Tools: Docker (build, optimization, debugging), Kubernetes, experience integrating security tools; * Security Knowledge: understanding of IAM misconfigurations, familiarity with OWASP Top 10, basic threat modeling, experience with secrets management (Vault, SOPS, or cloud-native solutions), experience integrating security tools into CI/CD (e.g., Slack, Jira); * Systems Knowledge: Linux (processes, networking, logs), Windows (AD basics, permissions); * English level: B2 or higher. Nice-to-Have: * Experience with Terraform / Infrastructure as Code (IaC); * Familiarity with cloud security tools (e.g., Prowler, ScoutSuite); * Experience with Cloudflare or edge security solutions; * Experience working with large-scale logging pipelines. Duties and Responsibilities: * Design, develop, and maintain security automation services using Python; * Build scalable tools to automate security and risk management processes across multiple departments; * Conduct technical security audits and identify vulnerabilities and improvement areas; * Develop integrations with internal systems and third-party security tools; * Create scripts and services for detecting, preventing, and mitigating security risks; * Integrate security checks and tooling into CI/CD pipelines; * Troubleshoot and debug infrastructure, applications, and automation workflows. Our Excellent Benefits: * Up to 25 vacation days * 6 undocumented sick leaves * Medical insurance and dental coverage * Sport card 70% coverage (Multisport and/or CoolFit) * Food vouchers (102 EUR) * Appreciation gifts (birthday, wedding, newborn, etc.) * Office massages * Breakfast, lunch & snacks in the office * Education budget  * Monthly team events * Great office location Working Model: * This is an office-based position in Sofia, Bulgaria.   Grow fast, shine globally! By submitting your application, you agree to our Privacy Policy.

ABOUT ALPHASENSE:  The world’s most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content. The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, AlphaSense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us! ABOUT THE ROLE We are building an AI-augmented Security Operations capability and need a Security Automation Engineer to sit at the intersection of security engineering and AI systems. You will design, build, and maintain the automation pipelines and tooling that allow our AI-driven detections, investigations, and responses to operate at machine speed. Working alongside detection engineers, threat intelligence analysts, and AI/ML engineers, you will turn manual processes into reliable, observable, and testable automation workflows ing system KEY RESPONSIBILITIES   AI-Powered Response Automation Design and operate SOAR playbooks and agentic AI workflows that triage, enrich, and respond to security alerts with minimal human intervention. Detection Engineering Support Translate detection logic and AI model outputs into actionable, low-noise alerts. Tune thresholds and automate feedback loops to continuously improve signal quality. Integration & Pipeline Development Build and maintain integrations between security tools (SIEM, EDR, TIP, identity platforms) and AI inference services using APIs, event streaming, and orchestration frameworks. Observability & Reliability Instrument automation pipelines with metrics, logging, and alerting so the security ops team can trust and verify AI-driven decisions in production. Automation Testing & Validation Write tests for playbooks and automation logic. Run purple-team exercises and tabletop simulations to validate that automated responses behave correctly under adversarial conditions. Cross-functional Collaboration Partner with AI/ML, DevSecOps, and IT teams to embed security automation into infrastructure change management workflows.   WHO YOU ARE BASIC REQUIREMENTS * 5+ years in security engineering, SecOps, or automation roles *  Proficiency in Python and/or Go for scripting and tooling *  Hands-on SOAR experience (Splunk SOAR, Palo Alto XSOAR, Tines, or similar) *  Experience with SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle) *  REST API integration and event-driven architecture *  Understanding of threat detection logic (MITRE ATT&CK, kill chain) *  Familiarity with LLM/AI APIs and prompt-driven automation workflows *   Version control and CI/CD practices (Git, GitHub Actions) *  Cloud security fundamentals (AWS, Azure, or GCP) *  Strong written documentation habits NICE TO HAVE * Experience deploying or fine-tuning ML models for anomaly detection or NLP-based log analysis * Familiarity with agentic AI frameworks (LangChain, AutoGen, CrewAI, or similar) * Container and orchestration experience (Docker, Kubernetes) * Certifications: CISSP,  AWS Security Specialty, or equivalent * Background in threat intelligence automation or Cyber Thread Intelligence platform integration (Malware Information Sharing Platform, OpenCTI) AlphaSense is an equal-opportunity employer. We are committed to a work environment that supports, inspires, and respects all individuals. All employees share in the responsibility for fulfilling AlphaSense’s commitment to equal employment opportunity. AlphaSense does not discriminate against any employee or applicant on the basis of race, color, sex (including pregnancy), national origin, age, religion, marital status, sexual orientation, gender identity, gender expression, military or veteran status, disability, or any other non-merit factor. This policy applies to every aspect of employment at AlphaSense, including recruitment, hiring, training, advancement, and termination. In addition, it is the policy of AlphaSense to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations, and ordinances where a particular employee works. Recruiting Scams and Fraud We at AlphaSense have been made aware of fraudulent job postings and individuals impersonating AlphaSense recruiters. These scams may involve fake job offers, requests for sensitive personal information, or demands for payment. Please note: * AlphaSense never asks candidates to pay for job applications, equipment, or training. * All official communications will come from an @alpha-sense.com [http://alpha-sense.com/] email address. * If you’re unsure about a job posting or recruiter, verify it on our Careers page [https://www.alpha-sense.com/careers/]. If you believe you’ve been targeted by a scam or have any doubts regarding the authenticity of any job listing purportedly from or on behalf of AlphaSense please contact us. Your security and trust matter to us.