Security Automation Engineer at Revizto

Job description

Revizto enables the people behind the world’s most important structures to do their best work. We connect architects, engineers, contractors, and owners in one shared 2D/3D environment to help deliver complex projects on time and on budget. From airports and hospitals to data centers and large-scale infrastructure, Revizto supports industry leaders in reducing risk, improving collaboration, and delivering better project outcomes. Built on a gaming engine, Revizto is designed to handle the scale and complexity of modern construction projects while remaining fast, reliable, and accessible across devices and environments — whether teams are in the office or on site. Key Responsibilities & Requirements Security Automation Development: Design, develop, test, and maintain reliable, scalable security automations and playbooks that streamline detection, triage, and incident response processes. Systems Integration: Integrate security platforms, business applications, and internal tools using REST APIs and webhooks to enable efficient, automated workflows. AI-Assisted Security Workflows: Develop and continuously improve AI-assisted workflows for security alert enrichment, triage support, and reporting, incorporating appropriate guardrails, testing, and evaluation mechanisms. Infrastructure as Code & Deployment: Manage automation infrastructure using infrastructure-as-code practices and implement reliable deployment processes through CI/CD pipelines. Automation Monitoring & Optimization: Monitor the health, reliability, and performance of automated workflows, troubleshoot failures, and continuously improve their effectiveness while measuring time savings and operational impact. Documentation & Automation Inventory: Create and maintain clear technical documentation, operational procedures, and an up-to-date inventory of automated security processes. Cross-Functional Collaboration: Partner closely with Security Operations analysts and engineering teams to gather requirements, identify opportunities for automation, and translate operational needs into effective technical solutions. Requirements Professional Experience: At least 3 years of hands-on experience in software engineering, DevOps, or security engineering. Programming Expertise: Strong proficiency in Python, including writing maintainable code with appropriate testing, error handling, and logging practices. Experience with Go is considered an advantage. API Development & Integration: Practical experience building, consuming, and integrating REST APIs to connect systems and automate workflows. Infrastructure as Code & CI/CD: Experience working with Terraform for infrastructure management and implementing automated build, testing, and deployment processes through CI/CD pipelines. Cloud Technologies: Hands-on experience with Microsoft Azure and/or AWS, including serverless computing or workflow automation services such as Azure Functions or Azure Logic Apps. Security Best Practices: Solid understanding of securely managing secrets, identities, access controls, and permissions within applications and infrastructure. Security Frameworks & Standards: Knowledge of established information security frameworks and compliance standards, including ISO 27001, NIST, CIS, and SOC 2. English Proficiency: Upper-intermediate (B2) or higher proficiency in English, both written and spoken. Preferred Qualifications Experience working with Security Orchestration, Automation and Response (SOAR) platforms or integrating with Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) systems through APIs. Experience designing and developing workflows powered by Large Language Models (LLMs). Previous experience in security operations, including Security Operations Centers (SOC), incident response (IR), or security detection. One or more relevant professional certifications, such as Microsoft Azure Developer Associate (AZ-204), Azure Security Engineer Associate (AZ-500), Hashi