Cyber Security Operations Center Analyst / AI-Automation Engineer
Core
Hybrid cybersecurity role combining threat investigation, detection engineering, and AI/automation development to improve Cyber Defense operations.
Role type
Senior IC Cyber Security Operations Center Analyst / AI-Automation Engineer
Builds
Automated response playbooks, AI agents, detection logic, and security tool integrations
Domain
Cybersecurity, AI/LLM operations, Software Engineering
Deliverable
production ML models | product features
Required skills
Threat hunting, Incident response, Detection engineering, Python/PowerShell scripting, API integration, SIEM/EDR analysis, MITRE ATT&CK, AI agent design, Prompt injection defense, Automation-as-code
Preferred skills
SOAR workflows, Detection-as-code, CI/CD, MCP servers, RAG, LLM observability
Technologies
Python, PowerShell, REST APIs, SOAR, MITRE ATT&CK, MCP, Claude Agent SDK, Azure AI Foundry, Git
Responsibilities
Investigate and respond to security alerts across endpoint, identity, network, cloud, and data environments; Develop and tune detections based on emerging threats and attack techniques; Build scripts and integrations to automate repetitive analyst workflows; Design and operate AI agents for investigation and response; Document investigation logic to convert knowledge into reusable capabilities
Seniority
Senior, hands-on IC
