Senior AI Engineer (SOC Automation)

Lead the design and delivery of AI automation across several Security Operations Center (SOC) workflows, working on agents, retrieval pipelines, and response automation while staying hands-on. Lead complex AI initiatives across security services teams using LLMs, agents, and retrieval pipelines. Define reusable architecture for agents, RAG, and tool integrations. Set evaluation methods and release criteria for accuracy, reliability, and false positives. Design controls for least-privilege access, sensitive data, prompt injection, and analyst approval of high-impact actions. Lead SIEM, SOAR, XDR/EDR, threat intelligence, and case management integration design. Improve shared Python components, testing, CI/CD, observability, and rollback practices. Own measurable outcomes such as investigation quality, analyst time saved, latency, and cost. Coordinate with Security Operations, Threat Research, Data Science, and DevOps.

• 7+ years building production software, including 2+ years with LLMs, agents, or applied ML
• 1+ year in or alongside a SOC or security team
• Deep Python and API engineering skills
• Experience evaluating OpenAI, Anthropic, or open-source models for production
• Record of leading architecture and delivery across multiple workflows or services
• Experience setting AI evaluation criteria and balancing quality, security, latency, and cost
• Security operations knowledge, including secure integrations and analyst oversight of automated response
• Experience with distributed or event-driven cloud services, testing, CI/CD, and observability
• Nice to have: SQL, Taegis, Sigma rules, MITRE ATT&CK mapping, vector databases, fine-tuning, agent frameworks, incident response, network or Windows log analysis

Flexible working, with remote roles within the location specified in the posting