{"schemaVersion":"jobsearcher.job.v1","id":"e82ffbf9e9008eda6eec2feb","url":"https://jobsearcher.com/jobs/e82ffbf9e9008eda6eec2feb","canonicalUrl":"https://jobsearcher.com/jobs/e82ffbf9e9008eda6eec2feb","title":"Lead Security Analyst","description":"OverviewIn this role, you lead the design, development, and maintenance of automated security workflows to streamline incident response. You'll collaborate with security analysts and engineers to turn operational needs into reliable automation, guided by responsible AI and production-ready playbooks. You drive measurable improvements in alert handling, triage, and remediation across SIEM, EDR, threat intel, and ticketing ecosystems. This position offers growth at the intersection of security operations and AI-enabled automation within a trusted, privacy-focused culture.Compensation / Benefitsbenefits packagevariable and commission compensation opportunitiesvacation entitlementpaid time offdisability and wellness programsflexible work arrangementsResponsibilitiesDesign, develop, and maintain automated security playbooks for alert triage, enrichment, investigation, response, notification, and ticketingBuild custom integrations and data transformation routines using Python and JinjaIntegrate SIEM, EDR, threat intelligence, firewall, case management, and ticketing platforms via REST APIs and connectorsMonitor, troubleshoot, and optimize automation workflows for reliability and performanceCollaborate with analysts and operations to automate manual security processesDebug code, enhance workflow execution, and maintain automation logic for production readinessSupport responsible adoption of AI-enabled automation for triage, recommendations, and human-reviewed actionsDrive automation best practices including testing, runbooks, change management, and cross-team collaborationContribute to SOC, incident response, threat intelligence, detection engineering, and vulnerability management workflowsKey requirementsStrong hands-on experience developing security automation using Python, Jinja, REST APIs, and structured data formatsExperience integrating security orchestration, monitoring, endpoint security, network security, threat intelligence, ticketing, and case management platformsSolid understanding of TCP/IP, DNS, HTTPS, and common network protocols used in security investigationsProven ability to troubleshoot complex automation issues, debug code, optimize workflows, and improve operational efficiencyExperience documenting workflows, maintaining version-controlled logic, testing playbooks, and supporting reliable production operationsStrong collaboration and communication skills, with ability to translate requirements into practical automation solutionsProactive mindset focused on continuous improvement, reducing manual response efforts, and enhancing incident response consistencyBachelor in Cybersecurity or equivalent experience with 5+ years in cybersecurity/automation/operations; preferred Security+, CISSP, GCIH, GCIA or related credentialscollaborationclear communicationproactive mindsetPythonJinjaREST APIs","company":"Opentext","rawCompany":"opentext","city":"Millbrae","state":"CA","isRemote":false,"isActive":false,"createdAt":"2026-10-26T13:44:04.145Z","occupations":[{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"13-1199.07","title":"Security Management Specialists","slug":"security-management-specialists"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Lead Security Analyst","description":"OverviewIn this role, you lead the design, development, and maintenance of automated security workflows to streamline incident response. You'll collaborate with security analysts and engineers to turn operational needs into reliable automation, guided by responsible AI and production-ready playbooks. You drive measurable improvements in alert handling, triage, and remediation across SIEM, EDR, threat intel, and ticketing ecosystems. This position offers growth at the intersection of security operations and AI-enabled automation within a trusted, privacy-focused culture.Compensation / Benefitsbenefits packagevariable and commission compensation opportunitiesvacation entitlementpaid time offdisability and wellness programsflexible work arrangementsResponsibilitiesDesign, develop, and maintain automated security playbooks for alert triage, enrichment, investigation, response, notification, and ticketingBuild custom integrations and data transformation routines using Python and JinjaIntegrate SIEM, EDR, threat intelligence, firewall, case management, and ticketing platforms via REST APIs and connectorsMonitor, troubleshoot, and optimize automation workflows for reliability and performanceCollaborate with analysts and operations to automate manual security processesDebug code, enhance workflow execution, and maintain automation logic for production readinessSupport responsible adoption of AI-enabled automation for triage, recommendations, and human-reviewed actionsDrive automation best practices including testing, runbooks, change management, and cross-team collaborationContribute to SOC, incident response, threat intelligence, detection engineering, and vulnerability management workflowsKey requirementsStrong hands-on experience developing security automation using Python, Jinja, REST APIs, and structured data formatsExperience integrating security orchestration, monitoring, endpoint security, network security, threat intelligence, ticketing, and case management platformsSolid understanding of TCP/IP, DNS, HTTPS, and common network protocols used in security investigationsProven ability to troubleshoot complex automation issues, debug code, optimize workflows, and improve operational efficiencyExperience documenting workflows, maintaining version-controlled logic, testing playbooks, and supporting reliable production operationsStrong collaboration and communication skills, with ability to translate requirements into practical automation solutionsProactive mindset focused on continuous improvement, reducing manual response efforts, and enhancing incident response consistencyBachelor in Cybersecurity or equivalent experience with 5+ years in cybersecurity/automation/operations; preferred Security+, CISSP, GCIH, GCIA or related credentialscollaborationclear communicationproactive mindsetPythonJinjaREST APIs","datePosted":"2026-10-26T13:44:04.145Z","dateModified":"2026-10-26T13:44:04.145Z","hiringOrganization":{"@type":"Organization","name":"Opentext","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Millbrae","addressRegion":"CA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"e82ffbf9e9008eda6eec2feb"},"url":"https://jobsearcher.com/jobs/e82ffbf9e9008eda6eec2feb"}}