AI Security & Automation Engineer

Aeries Technology, Inc.; Bengaluru; On-site; INR 1,800,000 - 2,600,000; Full time

Job summary

Aeries Technology, Inc. in Bangalore seeks an AI Security & Automation Engineer to design and run security automation that turns cloud telemetry into governed responses. Focus areas include Microsoft Sentinel, Azure Logic Apps, SOAR, secure API integration, and DevSecOps practices.

You will collaborate with Security Operations, Cloud, Infrastructure, and IT teams to improve detection, response speed, and operational resilience while maintaining audit-ready records.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related discipline.
• 4–8 years of cloud security engineering, security automation, SOC/DevSecOps experience.
• Hands-on with Microsoft Sentinel, Azure Logic Apps, KQL, REST APIs, IAM, and security automation.
• Experience with infrastructure-as-code templates (ARM, Bicep) and source-control (GitHub).
• Familiarity with Microsoft Defender and Entra ID; vulnerability management knowledge.

Responsibilities

• Design, develop, test, deploy, and maintain Microsoft Sentinel automation rules and Logic Apps playbooks.
• Engineer controlled response actions: token revocation, containment, device isolation, evidence collection.
• Own SOAR architecture, use-case mapping, tuning, monitoring, and continuous improvement.
• Develop KQL queries, rules, workbooks, and integrations for improved detection and response.
• Integrate AI services and security data sources into governed workflows with approval and logging.
• Build CI/CD pipelines for security content with version control and documentation.

Skills

Microsoft Sentinel

Azure Logic Apps

KQL

REST APIs

Identity & Access Controls

Security Automation

GitHub / CI-CD

ARM / Bicep templates

Security Copilot / AI services

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

GitHub

ARM

Bicep

Defender Security Suite

Job description

Position/Title: AI Security & Automation Engineer

Department: Information Security / IT Security

Employment Type: Full time

Location: Bangalore

Shifts - Morning: 6:00 AM - 3:00 PM and Evening:3:00 PM - 12:00 AM (Rotational shift but no night shift)

Experience: 4 to 8 years

About Aeries:

Aeries is a global services company providing technology and business solutions. Founded in 2012, Aeries Technology is a Nasdaq-listed global professional services and consulting partner, headquartered in Mumbai, India, with centres in the USA, Mexico, Singapore, and Dubai. We help mid-sized technology companies scale, optimise, and transform their business operations through deep vertical expertise, functional capabilities, fit-for-purpose systems, and customised engagement models. Aeries is Great Place to Work certified by GPTW India, reflecting our commitment to an inclusive and positive workplace culture.

For more information, visit http://www.aeriestechnology.com

Job Summary

The AI Security & Automation Engineer will design, implement, and operate security automation solutions that convert cloud and security telemetry into reliable, governed response actions. The role will focus on Microsoft Sentinel, Azure Logic Apps, SOAR engineering, secure API integration, KQL-based detection and automation, Security Copilot and approved AI services, vulnerability management, and DevSecOps practices. The successful candidate will work with Security Operations, Cloud, Infrastructure, Application, and IT teams to improve detection, response speed, control effectiveness, and operational resilience.

Key Responsibilities

• Design, develop, test, deploy, and maintain Microsoft Sentinel automation rules and Azure Logic Apps playbooks for repeatable incident-response scenarios.
• Engineer controlled response actions such as token revocation, user or identity containment, device isolation, malicious indicator blocking, case enrichment, notification, and evidence collection.
• Own SOAR architecture, use-case mapping, playbook tuning, exception handling, monitoring, and continuous improvement.
• Develop and optimise KQL queries, analytic rules, workbooks, automation triggers, and integrations that improve security detection and response.
• Integrate Microsoft Security Copilot, Microsoft Copilot Studio, Agent 365, approved AI services, and security data sources into governed workflows with appropriate validation, human approval, logging, and guardrails.
• Apply secure-by-design practices to APIs, service principals, managed identities, secrets, permissions, connectors, and automation components.
• Build and maintain CI/CD pipelines for security content using GitHub or equivalent repositories, including version control, peer review, testing, deployment, rollback, and documentation.
• Monitor automation health, investigate failures, manage schema or API changes, and resolve reliability, performance, and latency issues.
• Support vulnerability management activities, including vulnerability analysis, web application scanning, remediation coordination, validation, and risk-based reporting.
• Collaborate with Security Operations, IT, Cloud, and application teams to identify automation opportunities and translate operational requirements into scalable technical solutions.
• Maintain technical documentation, playbook runbooks, architecture diagrams, test evidence, change records, operational metrics, and audit-ready records.
• Track automation effectiveness through measurable indicators such as response time, successful execution rate, manual effort reduction, recurring failure rate, and coverage of priority use cases.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.
• 48 years of relevant experience in cloud security engineering, security automation, SOC engineering, DevSecOps, or related security operations roles.
• Hands‑on experience with Microsoft Sentinel, Azure Logic Apps, KQL, REST APIs, identity and access controls, and security automation or platforms.
• Experience with infrastructure‑as‑code or deployment templates such as ARM or Bicep, and source‑control platforms such as GitHub.
• Working knowledge of Microsoft Defender security products, Entra ID, Azure security services, networking, endpoint security, and incident‑response processes.
• Practical understanding of vulnerability management and web application security testing. Hands‑on penetration‑testing experience is an advantage.
• Relevant Microsoft certifications such as SC‑200, AZ‑500, SC‑100, or equivalent security and cloud certifications are desirable.

Required Skills

• Strong analytical, troubleshooting, and problem‑solving skills.
• Ability to write maintainable automation workflows and scripts with clear error handling, logging, and security controls.
• Sound understanding of secure coding, least privilege, secrets management, change management, and production support practices.
• Awareness of AI security risks, prompt safety, data protection, model or agent governance, and responsible use of AI in enterprise workflows.
• Good written and verbal communication skills, with the ability to explain technical risks and solutions to technical and non‑technical stakeholders.
• Automation‑first mindset with a focus on reliability, measurable improvement, documentation, and continuous learning.
• Ability to work independently and collaboratively in a fast‑paced, cross‑functional environment.

The job responsibilities of the candidate shall include, but are not limited to, those stated in this Job Description and any other tasks or functions assigned by the Company from time to time.