Detection & Automation Engineer

Join #Ensiteam!

At Ensitech, we are a custom software development company with more than 19 years of experience delivering high-quality technology solutions. 



We are looking for a Detection & Automation Engineer to extend and optimize an AI-enabled cybersecurity service through security detections, workflows, playbooks, tuning, customer-specific automation, and integrations. The underlying platform provides automated alert processing, enrichment, correlation, triage, case creation, and execution of known workflows. This role focuses on the engineering required when customer-specific detections, workflows, automations, tuning, or integrations are needed beyond the platform's standard capabilities. You will work closely with Security Operations and other engineering resources to improve the effectiveness and scalability of service delivery across customers.

Key Responsibilities​​​​​

• Develop and maintain security detections.


• Develop and enhance security workflows and playbooks.


• Perform detection and workflow tuning.


• Build customer-specific security automations.


• Develop and maintain integrations required for individual customer environments.


• Adapt workflows and automation to customer-specific security requirements.


• Collaborate with L2 and L3 Security Operations / Incident Response Engineers.


• Identify opportunities to improve the efficiency and scalability of security operations through automation. Support specialized engineering escalations related to detections, workflows, and automation.


• Contribute to the evolution of the service as it expands from shared/fractional resources toward dedicated resources and pods.


• Support engineering capabilities required for larger-scale and eventually 24x7 service delivery.

Required Skills & Experience​​​ ​​​​​​

• Experience in Detection Engineering, Security Automation, or Cybersecurity Engineering.


• Experience developing and maintaining security detections.


• Experience developing security workflows and playbooks.


• Experience with security automation and tuning.


• Experience building or supporting integrations between security technologies and platforms.


• Ability to develop customer-specific automation and workflows.


• Understanding of security operations processes and how automation supports investigation and response. Ability to collaborate closely with Security Operations and Incident Response teams.


• Ability to work across multiple customer environments and adapt engineering solutions to different requirements.

What We Offer

✅ 100% remote opportunity

✅ Opportunity to work on cutting-edge AI projects

✅ Collaboration with leading Frontier LLM companies

✅ International and innovation-driven environment

✅ Potential contract extension based on performance and project needs