Lead - SOC AI & Automation

Position Name - Lead - SOC AI & AutomationWe are expanding our SOC AI team and are hiring for a hands-on role focused on building AI agents and platforms and automation for a 24x7 multi-customer SOC.The role requires a strong engineering background combined with practical SOC experience. A clear understanding of how security operations workday today is essential to building solutions that address real operational challenges.Requirements: -Hands-on experience in a SOC, MSSP or MDR environment, with a solid understanding of alert triage, investigation, incident response and detection engineeringProven experience building AI agents and agentic workflows from scratch, beyond configuring vendor-provided AI productsPractical experience with agent frameworks such as LangChain/LangGraph, Agno, Google ADK, OpenAI Agents SDK or MastraStrong knowledge of LLMs, tool calling, structured outputs, RAG, embeddings, vector databases and multi-agent architecturesStrong Python development skills, plus experience with REST APIs, webhooks, containers, CI/CD and version controlUnderstanding of AI security risks and controls, including least privilege, secrets management and tenant isolationFamiliarity with MITRE ATT&CK and the detection lifecycle10+ years of hands-on experience in security engineering, software engineering for cybersecurity, or security automation, including at least 3 years designing and building SOC tooling or automationKey ResponsibilitiesDesign and develop AI agents and agentic workflows from scratch for alert triage, investigation, threat hunting, detection engineering, incident response and reportingLead technical implementation from initial design and prototyping through testing, deployment, production support, and continuous improvement.Automate enrichment, evidence collection, prioritization and escalation across SIEM, SOAR, EDR/XDR, identity, cloud, email and threat intelligence platformsBuild modular, vendor-agnostic solutions that support different models, cloud platforms and security technologiesDefine and run testing and evaluation for agent accuracy, groundedness, tool usage, latency and costImplement security controls for AI systems, including protection against prompt injection, data poisoning, unsafe tool use and data leakage, as well as tenant isolationWork closely with SOC analysts to understand operational needs and keep improving solutions based on feedback.