The Junior Automation Security Engineer builds and supports practical automations that make security controls easier to operate, validate, and scale. This is a hands-on engineering role for a curious builder who can write clean Python, work confidently in GitHub and GitHub Actions, and learn how Terraform and AWS services fit together. The engineer will use approved internal AI tools to accelerate research, prototyping, and documentation, while developing simple, secure agents and workflow automations under senior guidance.

What You Will Do

Security Automation & Python

• Build and maintain Python scripts, CLIs, API integrations, and scheduled jobs that reduce repetitive security and operational work.
• Automate evidence collection, configuration checks, alert enrichment, ticket creation, reporting, and basic remediation workflows.
• Write unit tests, logging, error handling, and concise documentation so automations are safe to operate and easy to support.

GitHub, CI/CD & Infrastructure as Code

• Contribute to repositories using pull requests, code review, branching, issue tracking, and dependency hygiene.
• Create and maintain GitHub Actions workflows for linting, testing, scanning, packaging, and controlled deployment tasks.
• Read, update, and test Terraform modules and plans with guidance; help identify insecure cloud configuration patterns before release.

AWS & Cloud Security Foundations

• Work with core AWS concepts including IAM, VPC, CloudTrail, CloudWatch, S3, Lambda, EC2, Secrets Manager, and AWS Organizations.
• Help automate cloud inventory, access reviews, configuration validation, tagging checks, and security findings triage.
• Follow least-privilege, secrets-management, logging, and change-control practices in all automation work.

AI-Assisted Engineering & Agents

• Use approved internal AI coding and productivity tools responsibly for code exploration, test generation, documentation, and prototyping.
• Practice AI-assisted or “vibe coding” in a disciplined way: validate generated code, protect confidential data, and submit reviewed changes.
• Help develop narrowly scoped internal agents that call approved tools, retrieve permitted knowledge, and keep a human approval step for impactful actions.
• Learn core AI security risks, including prompt injection, over-permissioned tools, data leakage, and unsafe agent behavior.

Collaboration

• Partner with security, platform, cloud, SOC, and engineering teams to turn recurring problems into reliable automations.
• Participate in incident follow-up, backlog refinement, peer review, and knowledge sharing.