Senior AI Detection & Response Consultant

EY; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

EY in Bengaluru seeks a Senior Cybersecurity Engineer to help build next-generation SOC solutions by integrating SIEM/XDR/SOAR with AI-driven automation. The role blends hands-on engineering with client delivery, focusing on scalable architectures and secure deployments across environments.

You will design agent-based AI systems to enhance threat detection, automate investigations, and orchestrate responses, while contributing to architecture diagrams, playbooks, and technical documentation for

Qualifications

• Extensive experience designing and implementing AI-driven SOC solutions.
• Proficient with SIEM/XDR/SOAR platforms and threat detection engineering.
• Experience integrating AI/LLM use cases into SOC workflows.
• Strong client-facing communication and incident response skills.

Responsibilities

• Design and implement agentic AI-driven SOC architectures integrated with SIEM, XDR, and SOAR.
• Develop AI use cases for alert triage, investigation, incident summarization, and automated response.
• Build and optimize detection use cases using rule-based and AI-assisted approaches.
• Integrate LLM capabilities into SOC workflows (analysis, correlation, playbooks).
• Support platform deployment, migration, and tuning across SIEM/XDR environments.
• Improve SOC efficiency through automation, noise reduction, and prioritization.
• Operationalize threat intelligence into detection pipelines.
• Collaborate with clients on solution design and implementation.
• Create architecture diagrams, playbooks, and technical documentation.
• Contribute to AI-driven SOC capability building.

Skills

AI/LLM automation

SIEM/XDR/SOAR

Automation scripting

Prompt engineering

Client communication

Tools

Microsoft Sentinel

Defender XDR

CrowdStrike

Splunk

Job description

Senior Cybersecurity Engineer Agentic AI & SOC Engineering (47 Years)

As a Senior Cybersecurity Engineer, you will help build next-generation SOC solutions by combining SIEM/XDR/SOAR with AI/LLM-driven automation. The role focuses on designing agent-based AI systems to enhance threat detection, automate investigations, and orchestrate response actions, while engaging in both hands-on engineering and client delivery.

Key Responsibilities

• Design and implement agentic AI-driven SOC architectures integrated with SIEM, XDR, and SOAR
• Develop AI use cases for alert triage, investigation, incident summarization, and automated response
• Build and optimize detection use cases using rule-based and AI-assisted approaches
• Integrate LLM capabilities into SOC workflows (analysis, correlation, playbooks)
• Support platform deployment, migration, and tuning across SIEM/XDR environments
• Improve SOC efficiency through automation, noise reduction, and prioritization
• Operationalize threat intelligence into detection pipelines
• Collaborate with clients on solution design and implementation
• Create architecture diagrams, playbooks, and technical documentation
• Contribute to AI-driven SOC capability building

Required Skills & Experience

• 47 years in Cybersecurity / SOC Engineering / Detection & Response
• Experience with platforms such as Microsoft Sentinel, Defender XDR, CrowdStrike, or Splunk
• Strong understanding of SIEM, SOAR, XDR/EDR, and detection engineering
• Exposure to AI/ML or LLM use cases in SOC environments
• Experience with automation (playbooks, APIs, scripting)
• Familiarity with prompt engineering or AI-assisted workflows
• Knowledge of MITRE ATT&CK and incident response lifecycle
• Strong problem-solving and client communication skills

Preferred Skills

• Experience with agentic AI frameworks (LangChain, Semantic Kernel, AutoGen, etc.)
• Exposure to Azure AI / OpenAI platforms
• Understanding of RAG, embeddings, or semantic search
• Experience integrating AI into SOC use cases (correlation, copilots, auto-remediation)
• Knowledge of cloud security / DevSecOps

What Youll Gain

• Opportunity to work on advanced AI-driven SOC transformations
• Exposure to enterprise cybersecurity challenges
• Platform to contribute to innovation in AI-led detection and response
• Collaborative environment with global clients