AWS DevOps SME

Job Req ID:

Posting Date:

Function:

Location:

Salary:

About the role

We are seeking a Security Automation Engineer with strong expertise in Python development, security automation, DevSecOps practices, and SIEM/SOAR platforms. The ideal candidate will be responsible for building automated security workflows, enhancing threat detection capabilities, integrating security tools, and improving Security Operations Centre (SOC) efficiency through automation and orchestration.

What you’ll be doing

• Design and develop security automation solutions using Python.
• Develop and maintain SOAR playbooks and automated incident response workflows.
• Integrate security tools, threat intelligence feeds, and operational platforms through APIs.
• Build and optimise SIEM use cases, detection rules, dashboards, and alerting mechanisms.
• Implement DevSecOps practices within software delivery and security operations processes.
• Automate repetitive security, compliance, and operational tasks to reduce manual effort.
• Collaborate with SOC analysts, Security Engineers, Platform Teams, and Development Teams.
• Enhance threat detection, incident response, and security monitoring capabilities

Essential Skills / Experience

• Strong hands-on experience in Python development and automation.
• Good understanding of DevSecOps principles and Secure Software Development Lifecycle (SSDLC).
• Experience with SIEM platforms such as Splunk, Elastic, Sentinel, QRadar, ArcSight, LogRhythm, or similar.\
• Experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, Microsoft Sentinel Automation, Swimlane, or similar.
• Experience integrating systems through REST APIs, webhooks, and automation frameworks.
• Experience with scripting, workflow automation, and orchestration.
• Strong understanding of cybersecurity concepts including:
  • Incident Response
  • Threat Detection
  • Vulnerability Management
  • Security Monitoring
  • Threat Intelligence

• Incident Response
• Threat Detection
• Vulnerability Management
• Security Monitoring
• Threat Intelligence

Preferred Skills

• Experience with cloud security monitoring in AWS, Azure, or GCP.
• Knowledge of container security, Kubernetes, and CI/CD security controls.
• Familiarity with Detection Engineering and MITRE ATT&CK framework.
• Exposure to AI/ML-based threat detection or security automation solutions.
• Experience with Infrastructure as Code (Terraform, Ansible, CloudFormation).

Desired Candidate Profile

• Strong automation-first mindset.
• Passion for solving operational challenges through engineering.
• Ability to translate security requirements into automated workflows.
• Strong analytical, troubleshooting, and problem-solving capabilities.
• Excellent stakeholder engagement and communication skills.

At BT International, our purpose is to keep the world connected. As part of BT, we build on almost 180 years of innovation and expertise to deliver secure connectivity and digital services to some of the world’s leading multinational businesses and organisations. Our customers trust us to safeguard their data, drive their digital transformation and keep their businesses running. With colleagues on the ground across the world and supporting customers wherever they need to operate, BT International offers a truly global experience. Whether it’s about providing cloud connectivity, helping organisations collaborate, or enabling innovation in cybersecurity and digital services, you’ll be part of a team that shapes how businesses succeed in a world that is being transformed by AI. If you have the drive and ambition to make an impact on a global stage, BT International is where it happens.