Cyber Defense Monitoring Engineer – Automation & AI
Core
Senior Cyber Defense Monitoring Engineer leading the transition to an AI-driven, agentic Security Operations Center (SOC) by building autonomous agents, engineering automation playbooks, and applying data science to threat detection.
Role type
Senior IC Cyber Defense Monitoring Engineer (Automation & AI)
Builds
AI-driven autonomous agents, automated SOAR playbooks, and ML-enhanced threat detection pipelines
Domain
Cybersecurity / AI Engineering / Data Science
Deliverable
production ML models
Required skills
Python, Go, PowerShell, RESTful APIs, LLMs, prompt engineering, LangChain, Pandas, Jupyter, SQL, SOAR platforms, MITRE ATT&CK, network protocols, OS internals
Preferred skills
GCIA, GCFA, AWS Certified Security / Machine Learning, SANS automation courses (SEC573, SEC540)
Technologies
Cortex XSOAR, Splunk SOAR, Torq, Tines, SIEM, EDR, NDR
Responsibilities
Design and deploy AI-driven autonomous agents for triage and containment; architect and write complex automation playbooks; apply ML models to security datasets for anomaly detection; implement Detection as Code with CI/CD pipelines; serve as Level 3 escalation point for complex threats; conduct proactive threat hunting and integrate threat intelligence
Seniority
Senior, hands-on IC
