Overview In this role you design and implement automated security workflows and AI-driven tooling to strengthen Novantas global security operations. You will build SOAR playbooks, detection pipelines, and AI-assisted investigations, partnering with Security and R&D; to embed security into development. You'll scale incident response, vulnerability management, and threat detection while ensuring compliance and data protection.

This is a hands-on, cross-functional role that fuses security, automation, and software development at scale.

Responsabilidades Design, develop, and maintain security automation workflows and SOAR playbooks for alert triage, containment, and remediation Build detection-as-code pipelines for SIEM and EDR platforms Develop AI-assisted investigation tools that correlate signals across security platforms Automate vulnerability management workflows including scan orchestration and remediation tracking Serve as security SME on R&D; CI/CD pipelines and embed security into development lifecycle Identify opportunities to shift security left in CI/CD pipelines Build API-level integrations between security tools and platforms Collaborate with IT, R&D;, Cloud,



and DevOps to align security automation with broader strategies Provide security automation expertise to management and leadership Create and improve security automation documentation, runbooks, and procedures Evaluate emerging AI and automation technologies and lead PoC initiatives Support incident response and threat hunting activities as needed Requisitos principales 3–5 years of experience in security operations, security engineering, or DevSecOps Strong proficiency in Python;

experience with PowerShell, Bash, or other scripting languages Hands-on experience with CI/CD platforms (GitHub Actions, Azure DevOps Pipelines, Jenkins) and Git Experience with SIEM, EDR, and SOAR platforms; familiarity with DLP and IAM tools a plus Cloud platforms knowledge (AWS, Azure, or GCP) and infrastructure-as-code concepts Experience building and consuming RESTful APIs for tool integration Familiarity with AI/ML concepts in cybersecurity; AI frameworks a plus Knowledge of security frameworks (NIST, MITRE ATT&CK;, CIS) and GDPR implications Relevant certifications such as GIAC, PCSAE, AWS Security Specialty (preferred) Dealing with ambiguity Analytical mindset Collaboration & communication across general teams Python PowerShell or Bash GitHub Actions, Azure DevOps Pipelines, Jenkins

📌 Security Automation Engineer (Barcelona)
🏢 Novanta
📍 Barcelona