Description

Build AI-driven capabilities to enhance Security Operations Center effectiveness, focusing on automation, intelligent threat detection, and workflow streamlining.

This role is hybrid.

Responsibilities

• Develop, manage, and enhance security controls including alerts, rules, policies, and signatures for security platforms.
• Design and optimize prompts and workflows to support LLM-based security use cases and build APIs for AI-driven capabilities.
• Lead the response to escalated cyber security alerts and incidents, identifying complex attack patterns and mitigation strategies.
• Build automation workflows and integrations to support AI agents and streamline SOC operations.
• Evaluate emerging AI technologies and implement safeguards for secure and responsible AI usage.

Required Skills

• 5+ years of hands-on programming experience with Python, Java, or Shell.
• 5+ years of experience with cloud platforms such as AWS or Microsoft Azure.
• 5+ years of exposure to SIEM platforms or detection engineering concepts.
• 4+ years of experience building or supporting automation solutions (e.g., SOAR, GitHub).
• 4+ years of experience working with security technologies or supporting SOC operations.
• Hands-on development experience with AI, GenAI, or LLM-based solutions.
• Familiarity with security telemetry including logs, alerts, endpoint, network, and cloud data.

Key Skills

Education

Any Graduate