Principal, Cybersecurity Automation - Remote
Core
Senior technical leader designing, building, and operating scalable automation and AI solutions for Cyber Defense to reduce repetitive work and accelerate security operations.
Role type
Principal, hands-on IC security automation and AI engineer
Builds
Production security automation pipelines, AI agents, and integrations for alert triage, containment, and threat intelligence
Domain
Cybersecurity, Security Operations Center (SOC), Artificial Intelligence
Deliverable
production ML models
Required skills
Python, SQL, REST APIs, LLM-based solution development, AI agent design, prompt engineering, SOC operations, MITRE ATT&CK, CI/CD, observability
Preferred skills
Enterprise SOAR platforms, Microsoft Sentinel/Defender XDR/Splunk/CrowdStrike, Azure/AWS/Azure OpenAI, agentic AI workflows, NIST AI Risk Management Framework
Technologies
Python, SQL, Microsoft Sentinel, Microsoft Defender XDR, Splunk, CrowdStrike, ServiceNow, Microsoft Azure, Azure AI Foundry, Azure OpenAI, AWS
Responsibilities
Own and prioritize the Cyber Defense automation roadmap; Design and operate automation for alert triage, enrichment, and containment; Implement AI agents with human-in-the-loop controls and safeguards; Establish engineering standards and reusable patterns; Mentor engineers and analysts; Define and report measurable outcomes like analyst hours returned and automation coverage
Seniority
Principal, hands-on IC with technical leadership
