AI-Driven Security Automation Engineer

GCS Recruitment; Philadelphia (Philadelphia County); On-site; USD 170,000 - 230,000; Full time

Job summary

GCS Recruitment seeks an experienced engineer to design and operate production-grade security automation and AI-driven workflows. You will build intelligent agents, enable memory and context management, and implement secure guardrails across threat intelligence, hunting, detection, and incident response.

The role requires hands-on software/AI development, strong Python skills, and experience with LLMs and API integrations in enterprise environments.

Qualifications

• Bachelor's degree or equivalent professional experience.
• 8+ years of software/security/automation experience.
• Experience building automation or AI-powered applications for production environments.
• Experience with large language models, generative AI, or agentic AI.
• Strong programming skills in Python or another modern language.
• Experience integrating apps with APIs and external systems.
• Understanding of AI agent concepts: tool use, planning, memory, verification.

Responsibilities

• Design, develop, test, deploy, and operate production-grade security automation and AI-driven workflows.
• Build intelligent agents capable of securely accessing data, invoking tools, maintaining context, and executing multi-step workflows.
• Develop automation for threat intelligence, threat hunting, detection engineering, security investigations, incident response and data analysis.
• Apply AI/automation techniques: tool calling, RAG, structured generation, planning, reflection, verification, model routing, and multi-agent coordination.
• Design memory, context management, task recovery, escalation, and human approval mechanisms.
• Reduce operational noise and false positives while speeding up security response with robust guardrails.

Skills

Python

AI/ML

LLMs

Security Automation

Problem Solving

Education

Bachelor's degree in CS/Engineering/Cybersecurity

Tools

APIs

Kubernetes

Vector Databases

Embeddings

RAG

Job description

Key Responsibilities

• Design, develop, test, deploy, and operate production-grade security automation and AI-driven workflows.
• Build intelligent agents capable of securely accessing security data, invoking approved tools, maintaining context, and executing multi-step workflows.
• Develop automation that can assist with:
  • Threat intelligence
  • Threat hunting
  • Detection engineering
  • Security investigations
  • Incident response
  • Security data analysis
• Apply modern AI and automation techniques, including:
  • Tool calling
  • Retrieval-augmented generation (RAG)
  • Structured generation
  • Planning
  • Reflection
  • Verification
  • Model routing
  • Multi-agent coordination
• Design mechanisms for memory, context management, task recovery, escalation, and human approval.
• Build automation designed to reduce operational noise and false positives while improving the speed and consistency of security response.
• Develop appropriate security controls and guardrails around AI agents and automated workflows.
• Create evaluation and testing strategies to measure the accuracy, reliability, security, and performance of automation.
• Evaluate emerging AI models, agent frameworks, automation platforms, and orchestration technologies.
• Prototype new capabilities and transition successful solutions into reliable production environments.
• Work closely with threat intelligence analysts, threat hunters, detection engineers, incident responders, and security-data engineers to understand operational challenges.
• Translate security requirements and operational processes into scalable technical solutions.
• Develop clean, maintainable, scalable, and well-documented code.
• Troubleshoot, monitor, and continuously improve automation running in production.
• Participate in architecture, design, code reviews, and technical decision-making.
• Identify opportunities to automate repetitive or time-sensitive security processes and improve overall SOC efficiency.

Required Qualifications

• Bachelor's degree in Computer Science, Engineering, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.
• 8+ years of experience in software engineering, security engineering, automation engineering, AI/ML engineering, or a related technical field.
• Strong hands-on software development experience.
• Experience building automation solutions or AI-powered applications for production environments.
• Experience working with Large Language Models (LLMs), generative AI, or agentic AI technologies.
• Strong programming skills in Python and/or another modern programming language.
• Experience integrating applications with APIs, tools, data sources, and external systems.
• Understanding of AI agent concepts such as tool use, planning, context management, retrieval, memory, and verification.
• Experience designing and implementing reliable, scalable technical solutions.
• Strong analytical and problem-solving skills.
• Ability to work with both software engineers and security professionals to translate operational challenges into technical solutions.

Preferred Qualifications

• Experience building agentic AI systems or autonomous security workflows.
• Experience with security automation, SOAR, SIEM, or security orchestration platforms.
• Experience with cybersecurity operations, threat intelligence, threat hunting, detection engineering, or incident response.
• Experience with RAG, vector databases, embeddings, semantic search, or knowledge retrieval.
• Experience with multi-agent architectures and AI orchestration frameworks.
• Experience developing AI evaluation frameworks, testing harnesses, or benchmarking processes.
• Experience with Kubernetes, cloud platforms, microservices, APIs, and distributed systems.
• Experience implementing human-in-the-loop controls and approval workflows.
• Experience taking AI/automation solutions from proof of concept through production deployment.
• Familiarity with security controls and best practices for deploying AI systems in enterprise environments.

GCS is acting as an Employment Business in relation to this vacancy.