AI-Driven Cyber Security Engineer (SOC Innovator)

NCR Corporation; Atlanta (GA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

NCR Corporation seeks a Cyber Security AI Engineer for its Atlanta, GA SOC to design, develop, and operationalize AI-driven security capabilities. You will collaborate with threat intelligence, incident response, and security engineering teams to enhance detection, triage, and investigations at scale.

The role requires expertise in ML, SIEM/EDR/XDR, and AI governance, with a focus on reducing analyst workload while increasing detection accuracy.

Qualifications

• 3+ years in cybersecurity or security operations.
• 2+ years building automation, analytics, or ML solutions.
• Experience with SIEM/EDR/XDR platforms.
• Proficient in Python, PowerShell, SQL, and API development.
• Knowledge of MITRE ATT&CK, NIST frameworks.
• Experience applying LLMs and AI in SOC workflows.

Responsibilities

• Design and deploy AI-driven SOC capabilities for threat detection and investigations.
• Support incident response with AI-assisted analytics and automation.
• Develop AI-powered detection rules and reduce false positives.
• Lead threat intelligence-driven detection and hunting initiatives.
• Build and optimize SOAR-driven automations and integrations.

Skills

Threat detection

Incident response

Threat hunting

Threat intelligence

Automation & scripting

Machine learning basics

LLMs & AI in SOC

SOAR platforms

Education

CISSP

GCIH

GCTI

SC-200

AI Engineer Associate (AI-102)

AZ-500

Security+

Tools

Microsoft Sentinel

Splunk

QRadar

Elastic

Python

PowerShell

SQL

REST API

Azure AI / OpenAI

Job description

NCR Corporation seeks a Cyber Security AI Engineer for its Atlanta, GA SOC to design, develop, and operationalize AI-driven security capabilities. You will collaborate with threat intelligence, incident response, and security engineering teams to enhance detection, triage, and investigations at scale.

The role requires expertise in ML, SIEM/EDR/XDR, and AI governance, with a focus on reducing analyst workload while increasing detection accuracy.