AI and Automation Engineer

Skillhub Solutions Inc.; Canada; Remote; CAD 86,000 - 143,000; Full time

Job summary

Skillhub Solutions Inc. is seeking an experienced engineer to design, build, and operate AI automation for security services.

You will take workflows from requirements through production, employing large language models, agents, and retrieval pipelines to reduce investigation effort and response time. The role involves delivering automation, integrating SIEM and SOAR tools, and mentoring engineers in a SOC-enabled environment.

Qualifications

• Minimum 5 years of production software experience including ML/LLMs.
• Experience in a SOC or security team context.
• Strong Python, REST API, and JSON skills.
• Experience bringing retrieval pipelines and agent workflows to production.
• Familiarity with security platforms and incident response concepts.

Responsibilities

• Deliver security-service automation and translate needs into implementation plans.
• Design agent workflows and retrieval pipelines using security telemetry and analyst runbooks.
• Integrate SIEM, SOAR, XDR/EDR, threat intel, and case-management tools via secure APIs and event interfaces.
• Evaluate factual accuracy, missed threats, false positives, and regressions before releases.
• Apply least-privilege access, data controls, and analyst approvals for high-impact actions; test resistance to prompt injection.
• Build and ship tested Python services through code review and CI/CD; monitor and maintain failure handling and rollback.
• Measure quality, workflow success, effort reduction, latency, and cost; improve workflows from production evidence.
• Coordinate with Security Operations, Threat Research, Data Science, and DevOps; document designs and runbooks and mentor engineers.

Skills

Python

LLMs

Agents

Retrieval pipelines

REST API

CI/CD

Git

Cloud deployment

Security tooling

Tools

Taegis

Sigma

MITRE ATT&CK

Vector databases

Docker

Job description

Remote - Canada Full-time CA$86,000 - CA$143,000 / year

Role Summary

Design, build, and operate AI automation for security services, taking workflows from requirements through production. The role uses large language models, agents, and retrieval pipelines to reduce investigation effort and response time.

What You Will Do

• Deliver security-service automation and translate service needs into implementation plans.
• Design agent workflows and retrieval-augmented generation pipelines using security telemetry, threat intelligence, and analyst runbooks.
• Integrate SIEM, SOAR, XDR/EDR, threat intelligence, and case-management tools through secure APIs and event-driven interfaces.
• Evaluate factual accuracy, missed threats, false positives, and regressions before releasing changes.
• Apply least-privilege access, sensitive-data controls, output validation, and analyst approval for high-impact actions; test resistance to prompt injection.
• Build and ship tested Python services through code review and CI/CD; monitor, troubleshoot, and maintain failure handling and rollback.
• Measure quality, workflow success, effort reduction, latency, and cost, and improve workflows using production evidence and user feedback.
• Coordinate with Security Operations, Threat Research, Data Science, and DevOps; document designs and runbooks and mentor engineers.

What You Will Bring

• At least 5 years of production software experience, including at least 1 year with LLMs, agents, or applied machine learning and 1 year in or alongside a SOC or security team.
• Strong Python, REST API, and JSON skills, with experience using an LLM provider or open-source models.
• Experience taking retrieval pipelines, evaluation frameworks, or agent workflows from design into production.
• Experience evaluating AI quality, investigating failure modes, integrating security platforms, and applying SOC investigation and incident-response concepts.
• Hands-on experience with Git, automated testing, CI/CD, cloud deployment, and production troubleshooting.
• Technical communication, risk judgment, and experience with reviews or mentoring.
• Additional experience with SQL, Taegis, Sigma, MITRE ATT&CK, vector databases, hybrid retrieval, fine-tuning, agent orchestration, incident response, network traffic, Windows event logs, containerized or event-driven services, or security and ML tooling is an asset.

Compensation and Location

In Canada, the base salary range is $86,000-$143,000 per year, with bonus eligibility and benefits. Specific pay depends on job-related factors. This role is remote within the location specified in the posting; candidates must reside in and be authorized to work in that location.