AI-Driven Security Automation Engineer

GCS Recruitment; New York (NY); Vor Ort; USD 140.000 - 190.000; Vollzeit

Zusammenfassung

Comcast's Cyber Security Operations Center is pursuing a machine-speed SOC capable of rapid, concurrent incident response. As a Senior Security Automation Engineer, you will build intelligent automation to reduce manual work, cut noise, and empower security teams to focus on what matters.

GCS is acting as an Employment Business in relation to this vacancy. You will design, develop, and deploy scalable security automation and AI-powered solutions, work closely with threat intelligence analysts

Qualifikationen

• Bachelor's degree or equivalent professional experience.
• 8+ years in software/security/automation engineering.
• Hands-on software development experience.
• Experience building automation or AI-powered production apps.
• Experience with LLMs or agentic AI technologies.
• Strong Python or modern programming language skills.
• Experience integrating with APIs and external systems.
• Understanding AI agent concepts like tool use, planning, context management, memory, and verification.
• Ability to translate security requirements into technical solutions.

Aufgaben

• Design, develop, test, deploy, and operate production-grade security automation and AI-driven workflows.
• Build intelligent agents capable of securely accessing security data, invoking tools, maintaining context, and executing multi-step workflows.
• Develop automation for threat intelligence, threat hunting, detection engineering, investigations, incident response, and security data analysis.
• Apply modern AI and automation techniques including tool calling, RAG, structured generation, planning, reflection, verification, model routing, and multi-agent coordination.
• Design mechanisms for memory, context management, task recovery, escalation, and human approval.
• Build automation to reduce noise and improve speed and consistency of security response.
• Develop security controls and guardrails around AI agents and automated workflows.
• Create evaluation/testing strategies to measure accuracy, reliability, security, and performance.
• Evaluate emerging AI models, agent frameworks, automation platforms, and orchestration technologies.
• Prototype new capabilities and transition to production environments.
• Collaborate with threat analysts, threat hunters, detection engineers, incident responders, and security-data engineers to understand challenges.
• Translate security requirements and operational processes into scalable technical solutions.
• Develop clean, maintainable, scalable, well-documented code.
• Troubleshoot, monitor, and improve automation in production.
• Participate in architecture/design/code reviews and decision-making.
• Identify opportunities to automate repetitive security processes and improve SOC efficiency.

Kenntnisse

Automation engineering

AI/ML engineering

Python

LLMs / Generative AI

Security automation

Ausbildung

Bachelor's degree or equivalent

Tools

Kubernetes

Cloud platforms

APIs

Distributed systems

Microservices

Jobbeschreibung

This position is ideal for an engineer who enjoys solving complex problems and building new capabilities from the ground up. The role goes beyond traditional security scripting, SOAR configuration, or test automation. You will help develop intelligent systems that can augment and automate the work performed by threat intelligence, threat hunting, detection engineering, investigation, and incident response teams.

Key Responsibilities

• Design, develop, test, deploy, and operate production-grade security automation and AI-driven workflows.
• Build intelligent agents capable of securely accessing security data, invoking approved tools, maintaining context, and executing multi-step workflows.
• Develop automation that can assist with:
  • Threat intelligence
  • Threat hunting
  • Detection engineering
  • Security investigations
  • Incident response
  • Security data analysis
• Apply modern AI and automation techniques, including:
  • Tool calling
  • Retrieval-augmented generation (RAG)
  • Structured generation
  • Planning
  • Reflection
  • Verification
  • Model routing
  • Multi-agent coordination
• Design mechanisms for memory, context management, task recovery, escalation, and human approval.
• Build automation designed to reduce operational noise and false positives while improving the speed and consistency of security response.
• Develop appropriate security controls and guardrails around AI agents and automated workflows.
• Create evaluation and testing strategies to measure the accuracy, reliability, security, and performance of automation.
• Evaluate emerging AI models, agent frameworks, automation platforms, and orchestration technologies.
• Prototype new capabilities and transition successful solutions into reliable production environments.
• Work closely with threat intelligence analysts, threat hunters, detection engineers, incident responders, and security-data engineers to understand operational challenges.
• Translate security requirements and operational processes into scalable technical solutions.
• Develop clean, maintainable, scalable, and well-documented code.
• Troubleshoot, monitor, and continuously improve automation running in production.
• Participate in architecture, design, code reviews, and technical decision-making.
• Identify opportunities to automate repetitive or time-sensitive security processes and improve overall SOC efficiency.

Required Qualifications

• Bachelor's degree in Computer Science, Engineering, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.
• 8+ years of experience in software engineering, security engineering, automation engineering, AI/ML engineering, or a related technical field.
• Strong hands-on software development experience.
• Experience building automation solutions or AI-powered applications for production environments.
• Experience working with Large Language Models (LLMs), generative AI, or agentic AI technologies.
• Strong programming skills in Python and/or another modern programming language.
• Experience integrating applications with APIs, tools, data sources, and external systems.
• Understanding of AI agent concepts such as tool use, planning, context management, retrieval, memory, and verification.
• Experience designing and implementing reliable, scalable technical solutions.
• Strong analytical and problem-solving skills.
• Ability to work with both software engineers and security professionals to translate operational challenges into technical solutions.

Preferred Qualifications

• Experience building agentic AI systems or autonomous security workflows.
• Experience with security automation, SOAR, SIEM, or security orchestration platforms.
• Experience with cybersecurity operations, threat intelligence, threat hunting, detection engineering, or incident response.
• Experience with RAG, vector databases, embeddings, semantic search, or knowledge retrieval.
• Experience with multi-agent architectures and AI orchestration frameworks.
• Experience developing AI evaluation frameworks, testing harnesses, or benchmarking processes.
• Experience with Kubernetes, cloud platforms, microservices, APIs, and distributed systems.
• Experience implementing human-in-the-loop controls and approval workflows.
• Experience taking AI/automation solutions from proof of concept through production deployment.
• Familiarity with security controls and best practices for deploying AI systems in enterprise environments.

What We're Looking For

We're looking for a builder who can take an ambiguous security problem and turn it into a working, scalable automation solution.

The ideal candidate is comfortable getting hands-on with code, experimenting with emerging AI technologies, integrating multiple systems, and figuring out how to move an idea from prototype to production.

You don't necessarily need to come from a cybersecurity background. Strong AI, software engineering, and automation experience is the priority. You'll have the opportunity to work alongside experienced security professionals who can provide the domain expertise.

The Opportunity

Comcast's Cyber Security Operations Center is working toward a machine-speed SOC capable of responding quickly and effectively to large-scale and concurrent security incidents.

As a Senior Security Automation Engineer, you'll help build the intelligent automation that makes that possible-reducing manual work, cutting through noise and false positives, and giving security teams the ability to focus their expertise where it matters most.

GCS is acting as an Employment Business in relation to this vacancy.