AI & Automation Engineer
Core
Lead technical design and delivery of AI automation across Security Operations Center (SOC) workflows, improving investigation quality and response time using LLMs, agents, and retrieval pipelines.
Role type
Senior hands-on IC AI & Automation Engineer
Builds
Reusable architecture for agents, RAG, tool integrations, and secure SOC service workflows
Domain
Cybersecurity / Security Operations Center (SOC)
Deliverable
production ML models
Required skills
Python, API engineering, LLMs, agents, RAG, vector databases, cloud services, CI/CD, SQL, security operations, incident response
Preferred skills
MITRE ATT&CK mapping, Sigma detection rules, Taegis, model fine-tuning, agent orchestration, containerized services
Technologies
OpenAI, Anthropic, Python, SQL, Taegis, Sigma, MITRE ATT&CK, vector databases
Responsibilities
Lead complex initiatives spanning security services teams; define reusable architecture for agents and RAG; establish evaluation methods and release criteria; design controls for least-privilege access and prompt injection; lead SIEM, SOAR, and XDR integration design; improve shared Python components and observability; shape priorities with Security Operations and Threat Research teams
Seniority
Senior, hands-on IC
