Senior Automation Engineer (AI-Accelerated Threat Response),

Procter & Gamble; Manila; On-site; PHP 1,800,000 - 2,400,000; Full time

Benefits offered by this job

Performance bonus (STAR program)

Flexible work schedule / work from any

Health insurance

Job summary

Procter & Gamble seeks a Senior Automation Engineer (AI-Accelerated Threat Response) to lead automation efforts within Global Cyber Defense. You will implement SOAR platforms, collaborate with SOC, Detection Engineering, and IRT, and drive AI-enabled automation to reduce response times across threats.

You will design playbooks, develop scripts, and integrate new log sources, ensuring fast, machine-speed containment of AI-driven attacks while aligning with business requirements.

Qualifications

• Comprehensive knowledge of both classic and emerging threat actor tactics, techniques, and procedures, including frontier AI/LLM systems for reconnaissance, exploit development, and attack automation.
• Proven experience in using Python for automating security operations and incident response processes, including integrating AI/LLM APIs to accelerate triage and enrichment.
• Strong understanding of security architecture, tool integration, API development, and automation.
• Extensive knowledge of Incident Response processes, with an emphasis on reducing response time for machine-speed, AI-accelerated attacks.
• Familiarity with common SOC and SOAR processes and workflows.
• Rich background and experience in SIEM systems.
• Experience with security-related datasets, log formats, and protocols.
• Excellent communication and collaboration skills to work effectively with cross-functional teams, particularly Detection Engineering.

Responsibilities

• Cooperate with the SOC, Detection Engineering, and broader Global Cyber Defense teams to enhance existing automation and deliver robust security solutions capable of matching the speed of AI-accelerated attacks.
• Evaluate, design, and upgrade SOC processes and workflows, focusing on integrating automation through SOAR tools and technologies to reduce mean-time-to-contain (MTTC) for novel, AI-driven attack techniques.
• Initiate new SOC automation, ensuring compatibility with existing detection and response tools, and rapidly operationalize new automated response actions as Detection Engineering identifies emerging AI-accelerated TTPs.
• Integrate new log sources and develop playbooks to efficiently triage and respond to security incidents while minimizing analysis time, prioritizing machine-speed response for incidents suspected of AI-assisted exploitation.
• Design custom scripts and evaluate AI/LLM-assisted tooling to automate existing detection and response workflows, increasing the speed and consistency of triage and containment.
• Assess SOC alerts statistics and workflows to minimize false positives and accurately direct engineering efforts.
• Create pipelines to enrich logs and alert results, providing a comprehensive view for SOC analysts.
• Operate and mature a SOC playbook, workflow automations, and use cases, with particular focus on scenarios involving frontier AI-enabled reconnaissance, exploit generation, and attack automation.
• Engage with stakeholders to identify business requirements and provide recommendations on leveraging data and automation effectively.

Skills

Python scripting

IR processes

Automation design

Communication & collaboration

Tools

SOAR platforms

API development

Job description

Job Location MANILA NET PARK OFFICE

Job Description

At P&G, your career is built to scale with our iconic brands like Ariel®, Safeguard ®, Tide ®, Head & Shoulders®, Old Spice®, and Vicks®. Ready to join the team that powers our iconic brands? Here’s what you’ll be doing: Overview of the job

As a Senior Automation Engineer (AI-Accelerated Threat Response), you will serve a critical role in our InfoSec’s Cyber Defense Technology team. You will focus on enhancing our organization’s automation, orchestration, and response capabilities through the strategic use of SOAR technology, ensuring our response speed keeps pace with the rise of frontier AI models capable of autonomously discovering and exploiting vulnerabilities at machine speed. You will lead the implementation of our SOAR platform, aiming to boost our overall efficiency and effectiveness in Global Cyber Defense. In this role, you will collaborate with various stakeholders to understand business requirements and strategize the utilization of automation for enhanced efficiency. Working closely with the Security Operations Center (SOC) team, Detection Engineering, and Incident Response Team (IRT), you will assist in the implementation and management of SOAR technologies, ensuring novel AI-accelerated attack techniques are contained and remediated with minimal human latency.

Responsibilities

• Cooperate with the SOC, Detection Engineering, and broader Global Cyber Defense teams to enhance existing automation and deliver robust security solutions capable of matching the speed of AI-accelerated attacks.
• Evaluate, design, and upgrade SOC processes and workflows, focusing on integrating automation through SOAR tools and technologies to reduce mean-time-to-contain (MTTC) for novel, AI-driven attack techniques.
• Initiate new SOC automation, ensuring compatibility with existing detection and response tools, and rapidly operationalize new automated response actions as Detection Engineering identifies emerging AI-accelerated TTPs.
• Integrate new log sources and develop playbooks to efficiently triage and respond to security incidents while minimizing analysis time, prioritizing machine-speed response for incidents suspected of AI-assisted exploitation.
• Design custom scripts and evaluate AI/LLM-assisted tooling to automate existing detection and response workflows, increasing the speed and consistency of triage and containment.
• Assess SOC alerts statistics and workflows to minimize false positives and accurately direct engineering efforts.
• Create pipelines to enrich logs and alert results, providing a comprehensive view for SOC analysts.
• Operate and mature a SOC playbook, workflow automations, and use cases, with particular focus on scenarios involving frontier AI-enabled reconnaissance, exploit generation, and attack automation.
• Engage with stakeholders to identify business requirements and provide recommendations on leveraging data and automation effectively.

Job Qualifications

• Comprehensive knowledge of both classic and emerging threat actor tactics, techniques, and procedures, including the growing use of frontier AI/LLM systems for reconnaissance, exploit development, and attack automation.
• Proven experience in using Python for automating security operations and incident response processes, including integrating AI/LLM APIs to accelerate triage and enrichment.
• Strong understanding of security architecture, tool integration, API development, and automation.
• Extensive knowledge of Incident Response processes, with an emphasis on reducing response time for machine-speed, AI-accelerated attacks.
• Familiarity with common SOC and SOAR processes and workflows.
• Rich background and experience in Security Information and Event Management (SIEM) systems.
• Experience with security-related datasets, log formats, and protocols.
• Excellent communication and collaboration skills to work effectively with cross-functional teams, particularly Detection Engineering.

Scale your career with P&G We provide avenues to scale your expertise and technological proficiency. As an experienced hire, you are empowered to scale your impact and go beyond being a developer with opportunities to lead, guide, and collaborate on transformative projects that power our brands. We are committed to scale your personal growth alongside the company’s success.

Here’s what’s on the table:

• Performance bonus (STAR program) that rewards managers in light with business results achieved.
• Thrive at work and your personal life through our flexible work schedule with available work from home arrangements.
• Your well-being is non-negotiable and supported by health insurance, fitness support, and an Employee Assistance Program.

Learn more about what’s in store for you at https://www.pgcareers.com/ph/en/benefits.

About us

We produce globally recognized brands and we grow the best business leaders in the industry. With a portfolio of trusted brands as diverse as ours, it is paramount our leaders are able to lead with courage the vast array of brands, categories and functions. We serve consumers around the world with one of the strongest portfolios of trusted, quality, leadership brands, including Always®, Ariel®, Gillette®, Head & Shoulders®, Herbal Essences®, Oral-B®, Pampers®, Pantene®, Tampax® and more. Our community includes operations in approximately 70 countries worldwide. Visit http://www.pg.com to know more. We are an equal opportunity employer and value diversity at our company. We do not discriminate against individuals on the basis of race, color, gender, age, national origin, religion, sexual orientation, gender identity or expression, marital status, citizenship, disability, HIV/AIDS status, or any other legally protected factor.

Job Schedule

Full time

Job Number

R000155196

Job Segmentation

Experienced Professionals