Cybersecurity Automation Engineer

About the role

The ICE Cybersecurity Automation team automates global information security workflows in a highly regulated critical financial infrastructure environment. This engineer focuses on backend services, APIs, databases and integrations supporting Red Team, Blue Team, Threat Intelligence, Application Security and Governance, Risk and Compliance. The role combines software development, AI-assisted coding, system administration and command-line troubleshooting.

Key responsibilities

• Design and maintain secure backend applications and automation services using Python, Django and other frameworks.
• Develop APIs and security platform integrations, build data pipelines, relational schemas and efficient SQL queries.
• Use AI-assisted coding tools for development, refactoring, debugging, testing and documentation, then review generated code for functionality, dependencies and security.
• Administer Linux environments with Bash, managing services, permissions, configuration, logs and scheduled jobs, and troubleshooting network and resource issues.
• Automate testing, deployments and provisioning through CI/CD, containers and infrastructure as code, applying version control, peer review and secure coding practices.
• Partner with security teams on automation, analytics and behavioural detection workflows, and support production services through monitoring, incident investigation, performance improvements and runbooks.

Required profile

• 3+ years of software development experience with a strong backend or automation focus.
• Hands-on experience with AI-assisted coding tools, including reviewing generated code and protecting sensitive data.
• Experience developing and consuming REST APIs, including JSON, authentication and authorization.
• Practical Linux system administration experience and command-line proficiency.
• Understanding of secure coding, secrets management, least privilege and application security risks.

Required skills

• Python and Django or a comparable backend framework; SQL and relational database design and query optimisation.
• Git, code reviews, unit and integration testing, CI/CD (Jenkins, Docker).
• Bash scripting, DNS, TCP/IP, HTTP and TLS.
• Preferred: cybersecurity automation in a regulated environment, Ansible, Terraform, Chef or Puppet, PowerShell or Java, and Vue.js.