Information Security Engineer - DevSecOps at Williams-Sonoma, Inc. in Rocklin, CA

Job description

About the Team You will be part of the Enterprise Cyber Security organization responsible for protecting Williams-Sonoma, Inc. through reliable, scalable security platforms and automation. The Security DevSecOps function partners with Security Operations, Incident Response, Threat Intelligence, Security Engineering, Identity & Access Management, and Infrastructure to build software and integrations that improve the effectiveness of enterprise security operations. The team’s mission is to reduce repetitive manual work, strengthen response capabilities, and deliver secure, maintainable software and automation that support our associates, customers, and business. About the Role As an Information Security Engineer - DevSecOps, you will design, develop, deploy, and support SOAR playbooks, workflow automations, platform integrations, and custom applications used by the Enterprise Cyber Security team. This is a hands-on engineering role with end-to-end responsibility for solution design, coding, testing, deployment, documentation, and production support. You will balance SOAR development, security automation, and custom software development while working closely with operational teams to translate security requirements into dependable technical solutions. Responsibilities Design, develop, test, deploy, and maintain SOAR playbooks and response workflows in Google SecOps SOAR and Palo Alto Cortex XSOAR. Build custom security applications, reusable services, scripts, and workflow automations that improve investigation, enrichment, triage, and response processes. Develop and maintain secure integrations using REST APIs, JSON, webhooks, and platform SDKs across Google SecOps SIEM, CrowdStrike, Tanium, Ping Identity, Delinea, MISP, and other enterprise systems. Own the full software development lifecycle, including requirements analysis, solution design, source control, testing, release management, documentation, and ongoing production maintenance. Apply Python and PowerShell to automate repeatable security operations tasks; use Git and CI/CD practices to manage versioning, code review, and controlled releases. Use Docker and container-based development practices, and Terraform or other infrastructure-as-code approaches where appropriate for repeatable deployments. Partner with SOC, Incident Response, Threat Intelligence, Security Engineering, IAM, and Infrastructure teams to identify automation opportunities and translate operational needs into technical requirements. Troubleshoot failed playbooks, API integrations, custom applications, and production workflows; conduct root-cause analysis and implement durable fixes. Build appropriate safeguards into automations, including least-privilege access, credential protection, audit logging, error handling, testing, approval gates, and rollback procedures for disruptive actions. Participate in an on-call rotation supporting production SOAR automations, integrations, and custom security applications. Evaluate AI-assisted development and agentic automation opportunities, applying human review, security controls, and validation before production adoption. Maintain clear technical documentation, runbooks, and knowledge transfer materials to support reliable operations and cross-team collaboration. Criteria 3+ years of experience in information security engineering, software development, DevSecOps, security automation, or a related technical discipline. Bachelor's degree in Computer Science or related field, or equivalent work experience. Hands-on software development and scripting experience using Python and PowerShell, with working knowledge of REST APIs and JSON. Experience building, testing, and maintaining automation workflows, platform integrations, or custom applications in production environments. Working knowledge of SIEM, SOAR, endpoint security, identity, and threat intelligence concepts and operational workflows. Experience with Git-based source control, CI/CD practices, software testing,