Senior AI-Driven SOAR & Threat Response Engineer

Procter & Gamble; Manila; On-site; PHP 1,800,000 - 2,400,000; Full time

Benefits offered by this job

Performance bonus (STAR program)

Flexible work schedule / work from any

Health insurance

Job summary

Procter & Gamble seeks a Senior Automation Engineer (AI-Accelerated Threat Response) to lead automation efforts within Global Cyber Defense. You will implement SOAR platforms, collaborate with SOC, Detection Engineering, and IRT, and drive AI-enabled automation to reduce response times across threats.

You will design playbooks, develop scripts, and integrate new log sources, ensuring fast, machine-speed containment of AI-driven attacks while aligning with business requirements.

Qualifications

• Comprehensive knowledge of both classic and emerging threat actor tactics, techniques, and procedures, including frontier AI/LLM systems for reconnaissance, exploit development, and attack automation.
• Proven experience in using Python for automating security operations and incident response processes, including integrating AI/LLM APIs to accelerate triage and enrichment.
• Strong understanding of security architecture, tool integration, API development, and automation.
• Extensive knowledge of Incident Response processes, with an emphasis on reducing response time for machine-speed, AI-accelerated attacks.
• Familiarity with common SOC and SOAR processes and workflows.
• Rich background and experience in SIEM systems.
• Experience with security-related datasets, log formats, and protocols.
• Excellent communication and collaboration skills to work effectively with cross-functional teams, particularly Detection Engineering.

Responsibilities

• Cooperate with the SOC, Detection Engineering, and broader Global Cyber Defense teams to enhance existing automation and deliver robust security solutions capable of matching the speed of AI-accelerated attacks.
• Evaluate, design, and upgrade SOC processes and workflows, focusing on integrating automation through SOAR tools and technologies to reduce mean-time-to-contain (MTTC) for novel, AI-driven attack techniques.
• Initiate new SOC automation, ensuring compatibility with existing detection and response tools, and rapidly operationalize new automated response actions as Detection Engineering identifies emerging AI-accelerated TTPs.
• Integrate new log sources and develop playbooks to efficiently triage and respond to security incidents while minimizing analysis time, prioritizing machine-speed response for incidents suspected of AI-assisted exploitation.
• Design custom scripts and evaluate AI/LLM-assisted tooling to automate existing detection and response workflows, increasing the speed and consistency of triage and containment.
• Assess SOC alerts statistics and workflows to minimize false positives and accurately direct engineering efforts.
• Create pipelines to enrich logs and alert results, providing a comprehensive view for SOC analysts.
• Operate and mature a SOC playbook, workflow automations, and use cases, with particular focus on scenarios involving frontier AI-enabled reconnaissance, exploit generation, and attack automation.
• Engage with stakeholders to identify business requirements and provide recommendations on leveraging data and automation effectively.

Skills

Python scripting

IR processes

Automation design

Communication & collaboration

Tools

SOAR platforms

API development

Job description

Procter & Gamble seeks a Senior Automation Engineer (AI-Accelerated Threat Response) to lead automation efforts within Global Cyber Defense. You will implement SOAR platforms, collaborate with SOC, Detection Engineering, and IRT, and drive AI-enabled automation to reduce response times across threats.

You will design playbooks, develop scripts, and integrate new log sources, ensuring fast, machine-speed containment of AI-driven attacks while aligning with business requirements.