AI-Driven Security Automation Engineer

Alphasense; New York (NY); On-site; USD 130,000 - 190,000; Full time

Job summary

AlphaSense is building an AI-augmented Security Operations capability and seeks a Security Automation Engineer to design, build, and maintain automation pipelines that enable AI-driven detections, investigations, and responses at machine speed.

You will work with detection engineers, threat intelligence analysts, and AI/ML engineers to turn manual processes into reliable, observable, and testable automation workflows. Strong Python/Go, SOAR, and SIEM experience are required.

Qualifications

• 5+ years in security engineering, SecOps, or automation roles.
• Proficiency in Python and/or Go for scripting and tooling.
• Hands-on SOAR experience (Splunk SOAR, Palo Alto XSOAR, Tines, or similar).
• Experience with SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle).
• REST API integration and event-driven architecture.
• Understanding of threat detection logic (MITRE ATT&CK, kill chain).
• Familiarity with LLM/AI APIs and prompt-driven automation workflows.
• Version control and CI/CD practices (Git, GitHub Actions).
• Cloud security fundamentals (AWS, Azure, or GCP).

Responsibilities

• AI-Powered Response Automation: Design and operate SOAR playbooks and agentic AI workflows that triage, enrich, and respond to security alerts with minimal human intervention.
• Detection Engineering Support: Translate detection logic and AI model outputs into actionable, low-noise alerts. Tune thresholds and automate feedback loops to continuously improve signal quality. Build and maintain integrations between security tools (SIEM, EDR, TIP, identity platforms) and AI inference services using APIs, event streaming, and orchestration frameworks.
• Observability & Reliability: Instrument automation pipelines with metrics, logging, and alerting so the security ops team can trust and verify AI-driven decisions in production.
• Automation Testing & Validation: Write tests for playbooks and automation logic. Run purple-team exercises and tabletop simulations to validate that automated responses behave correctly under adversarial conditions.
• Cross-functional Collaboration: Partner with AI/ML, DevSecOps, and IT teams to embed security automation into infrastructure change management workflows.

Skills

Security engineering

Automation

Python

Go

SOAR

SIEM

REST API

AI/LLM familiarity

CI/CD

Cloud security

Tools

Splunk SOAR

Palo Alto XSOAR

Tines

Splunk SIEM

Microsoft Sentinel

Google Chronicle

LangChain

Docker

Kubernetes

Job description

AlphaSense is building an AI-augmented Security Operations capability and seeks a Security Automation Engineer to design, build, and maintain automation pipelines that enable AI-driven detections, investigations, and responses at machine speed.

You will work with detection engineers, threat intelligence analysts, and AI/ML engineers to turn manual processes into reliable, observable, and testable automation workflows. Strong Python/Go, SOAR, and SIEM experience are required.