AI Security Automation Engineer

The Position

The AI Security Automation Engineer designs, builds, and operates AI-enabled automation across Cybersecurity Operations. The role converts manual, repetitive, and data-heavy security processes into governed workflows and agentic systems with clear controls, auditability, metrics, and human approval where required. 

This role remains security-first: automation must strengthen control effectiveness, reduce cycle time, improve evidence quality, and support faster detection and response without weakening governance, privacy, or accountability.

What You Will be Doing

• Build agentic security workflows. Design and implement AI agents that gather context, analyze security data, use approved tools, generate evidence, route work, and escalate decisions within defined guardrails. 
• Develop and maintain SOAR and security automation playbooks for alert enrichment, triage, correlation, evidence capture, case creation, notifications, response recommendations, and remediation tracking. 
• Automate security controls, KCI calculations, evidence collection, validation, testing support, exception handling, and management reporting across the security control framework. 
• Streamline selected GRC workflows, including ISQ, TPSR, evidence collection, control mapping, risk flagging, exception routing, SLA tracking, and audit trails. 
• Integrate SIEM, SOAR, EDR, identity, vulnerability, cloud security, ticketing system, data platforms, APIs, and collaboration tools into end-to-end security workflows. 
• Performing other tasks as assigned by Direct Supervisor. 

What We Need from You 

• 3+ years of experience in cybersecurity, SecOps engineering, security automation, platform engineering, GRC engineering, or a related role. 
• Demonstrated experience building production-grade security workflows, integrations, or automation. 
• Hands-on programming experience with Python or a similar language, REST APIs, webhooks, JSON, SQL, authentication, data transformation, and error handling. 
• Experience with SIEM, SOAR, EDR, case-management, ticketing, GRC, or comparable security platforms. 
• Practical understanding of alert triage, security investigations, incident response, remediation, and operational security metrics. 
• Experience developing LLM-enabled workflows or agents that use tools, retrieve enterprise context, maintain traceability, and incorporate human review. 

#LI-onsite