Python Automation Engineer_3377

Role overview

Python Automation Engineer_3377 at Allianz

Build, maintain, and optimize SOAR playbooks within Google SecOps to automate security case triage, investigation, and remediation.

Responsibilities

• Integrate Google SecOps SIEM with CrowdStrike EDR and other data sources for seamless alert ingestion and correlation.
• Automate the full security case lifecycle: log ingestion → alert creation → triage → true/false positive classification → Archer incident creation or case closure.
• Develop Python scripts and automation workflows to reduce manual analyst touchpoints across the ACDC.
• Integrate REST APIs with third-party security tools for orchestration and enrichment.
• Troubleshoot and improve existing SOAR playbooks and automation pipelines.

Required qualifications

• Bachelor’s / Master’s full-time degree in a Technical stream.
• 3 to 5 years of hands-on experience in security operations, security automation, or a SOC/SIEM engineering role — with demonstrated expertise in building SOAR playbooks, scripting automation workflows, and integrating security tools via REST APIs.
• Allianz Group is one of the most trusted insurance and asset management companies in the world.
• Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer.
• Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.
• At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all.
• And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.
• We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.
• Join us.
• Let's care for tomorrow.

Required skills

• Google SecOps (Chronicle SIEM + SOAR) — hands-on experience building and managing SOAR playbooks.
• Python scripting (Mandatory) — for automation, playbook actions, and security workflow development.
• CrowdStrike EDR understanding is a plus for integration with Google SecOps SIEM for alert ingestion and automated response.
• REST API (Mandatory) - integration with security tools (EDR, ticketing, threat intelligence platforms).
• Security case lifecycle automation — from log ingestion through triage to Archer incident creation or closure.
• Git — version control for automation code and SOAR configurations.
• Exposure in AI ,Agentic AI,Gen AI is preferrable.

Preferred qualifications and skills

• CI/CD tools (Jenkins, GitHub Actions) for deploying SOAR automation updates.
• Entry-level security certification (CompTIA Security+ or equivalent).
• Basic cloud knowledge (AWS or Azure) for security tool integrations.
• Familiarity with Grafana or similar for SOC metrics dashboards.

Employment details

• Location: India

About the employer

• The Automation Engineer is the operational backbone of the ‘Detection Cluster’ in Allianz Cyber Defense Center (ACDC).

Additional role details

• The role is responsible for building and maintaining the SOAR playbooks and Google SecOps workflows that allow the ACDC to handle security cases at scale — centralized and as automated as possible.The engineer will integrate Google SecOps SIEM with CrowdStrike EDR, automate the end-to-end security case lifecycle, and continuously reduce manual effort across the security operations team.
• Experience, Technical and Functional Skills.