Senior AI Security SOC Engineer – Automation & AI Workflows

eFinancialCareers; Greater London; Hybrid; GBP 90,000 - 140,000; Full time

Job summary

eFinancialCareers seeks a Senior AI Security Engineer to drive the SOC automation program in a hybrid London setting. You will design and implement AI-enabled security workflows, mentor analysts, and scale cyber defense capabilities.

The role focuses on agentic orchestration for SOC, API integrations, and AI-assisted triage, runbooks and incident response. Collaborate with global teams to move prototypes into production with governance.

Qualifications

• Security engineering within a SOC with hands-on automation
• Ability to build integrations via scripts and APIs
• Cloud knowledge (Azure essential; AWS useful)
• Experience applying AI/LLMs in operations
• Ability to translate concepts for varied audiences
• Strong runbook and incident response capabilities

Responsibilities

• Build and improve SOC automations and playbooks (triage, enrichment, case handling, response actions).
• Develop AI-assisted workflows (summarisation, guided triage, recommended next steps, knowledge lookup over runbooks).
• Develop and secure AI agents and their skills with robust safety controls.
• Integrate tools and data sources using APIs/webhooks and maintain observable workflows.
• Partner with SOC/IR to move from prototype to production with governance and documentation.
• Track outcomes (time-to-triage/close, automation success rates, alert noise reduction).

Skills

SOAR automation

Python/PowerShell

APIs

Azure

LLMs in Ops

Incident response

Runbooks

Playbooks

Tools

Github Actions

Kubernetes AKS

Terraform

Ansible

n8n

Job description

eFinancialCareers seeks a Senior AI Security Engineer to drive the SOC automation program in a hybrid London setting. You will design and implement AI-enabled security workflows, mentor analysts, and scale cyber defense capabilities.

The role focuses on agentic orchestration for SOC, API integrations, and AI-assisted triage, runbooks and incident response. Collaborate with global teams to move prototypes into production with governance.