GDS Cyber - Frontier AI Layered Defense Detection and Response - Senior

EY; Kolkata District; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

EY seeks a Senior Cybersecurity Engineer to help build next-generation SOC solutions by combining SIEM, XDR, SOAR with AI-driven automation. The role blends hands-on engineering with client delivery.

You will design agent-based AI systems, develop use cases for alert triage and automated response, and collaborate with clients to implement scalable security architectures.

Join EY to work on innovative AI-led detection and response in a global team.

Qualifications

• 4–7 years of experience in Cybersecurity / SOC engineering.
• Experience with SIEM, SOAR, XDR/EDR and detection engineering.
• Experience with platforms such as Microsoft Sentinel, Defender XDR, CrowdStrike, or Splunk.
• Exposure to AI/ML or LLM use cases in SOC environments.
• Automation experience (playbooks, APIs, scripting).

Responsibilities

• Design and implement agentic AI-driven SOC architectures with SIEM/XDR/SOAR.
• Develop AI use cases for alert triage, investigation, incident summarization, and automated response.
• Build and optimize detection use cases using rule-based and AI-assisted approaches.
• Integrate LLM capabilities into SOC workflows (analysis, correlation, playbooks).
• Support platform deployment, migration, and tuning across SIEM/XDR environments.
• Improve SOC efficiency through automation and noise reduction.
• Operationalize threat intelligence into detection pipelines.
• Collaborate with clients on solution design and implementation.
• Create architecture diagrams, playbooks, and technical documentation.
• Contribute to AI-driven SOC capability building.

Skills

Cybersecurity

SIEM

SOAR

XDR/EDR

AI/ML in SOC

Automation

Tools

Microsoft Sentinel

Defender XDR

CrowdStrike

Splunk

LangChain

Semantic Kernel

AutoGen

Azure AI

OpenAI

Job description

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Senior Cybersecurity Engineer - Agentic AI & SOC Engineering (4-7 Years)

Role Overview

As a Senior Cybersecurity Engineer, you will help build next-generation SOC solutions by combining SIEM/XDR/SOAR with AI/LLM-driven automation. The role focuses on designing agent-based AI systems to enhance threat detection, automate investigations, and orchestrate response actions, while engaging in both hands‑on engineering and client delivery.

Key Responsibilities

• Design and implement agentic AI-driven SOC architectures integrated with SIEM, XDR, and SOAR
• Develop AI use cases for alert triage, investigation, incident summarization, and automated response
• Build and optimize detection use cases using rule-based and AI-assisted approaches
• Integrate LLM capabilities into SOC workflows (analysis, correlation, playbooks)
• Support platform deployment, migration, and tuning across SIEM/XDR environments
• Improve SOC efficiency through automation, noise reduction, and prioritization
• Operationalize threat intelligence into detection pipelines
• Collaborate with clients on solution design and implementation
• Create architecture diagrams, playbooks, and technical documentation
• Contribute to AI-driven SOC capability building

Required Skills & Experience

• 4-7 years in Cybersecurity / SOC Engineering / Detection & Response
• Experience with platforms such as Microsoft Sentinel, Defender XDR, CrowdStrike, or Splunk
• Strong understanding of SIEM, SOAR, XDR/EDR, and detection engineering
• Exposure to AI/ML or LLM use cases in SOC environments
• Experience with automation (playbooks, APIs, scripting)

  Preferred Skills

  • Experience with agentic AI frameworks (LangChain, Semantic Kernel, AutoGen, etc.)
  • Exposure to Azure AI / OpenAI platforms
  • Understanding of RAG, embeddings, or semantic search
  • Experience integrating AI into SOC use cases (correlation, copilots, auto-remediation)
  • Knowledge of cloud security / DevSecOps

  What You’ll Gain

  • Opportunity to work on advanced AI-driven SOC transformations
  • Exposure to enterprise cybersecurity challenges
  • Platform to contribute to innovation in AI-led detection and response
  • Collaborative environment with global clients

  EY | Building a better working world

  EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

  Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

  Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.