AI-Driven SOC Architect: Automated Threat Defense

ByLabs; Seattle (WA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

ByLabs perks not listed

Job summary

ByLabs is seeking an AI SOC Engineer who blends offensive/defensive security with hands-on AI engineering to build the Security Brain, automating detection rule generation and alert suppression within fully automated security operations.

You will leverage LLMs and AI agents to keep pace with AI-powered adversaries, design detection scenarios from an attacker’s view, and drive adoption of AI SOC capabilities across threat hunting, incident response, and SecOps automation.

Qualifications

• 3+ years of SOC operations or penetration testing experience.
• Experience with SIEM platforms and detection rule languages.
• Familiar with MITRE ATT&CK framework and mapping TTPs.
• Hands-on alert investigation, incident response, or threat hunting.
• Strong Python for developing AI-assisted security tools and automation.
• Familiar with AI/ML models applied to security use cases.
• Preferred: designing or building AI SOC products or SecOps Copilot.
• Familiarity with graph databases in security contexts.
• Preferred: security certifications or public research contributions.

Responsibilities

• Use LLMs and AI tools to automate generation, testing, and optimization of detection rules.
• Design AI/ML-based alert triage, prioritization, and false-positive suppression.
• Architect insights by integrating threat intel and context into a knowledge graph.
• Research and deploy AI SOC capabilities for automated threat hunting and investigations.
• Design detection scenarios from an attacker’s perspective covering TTPs.
• Research AI-assisted attack techniques and build corresponding detection capabilities.
• Track AI SOC frontier research and drive internal adoption.

Skills

SOC operations

Python engineering

AI/LLM security

Threat hunting

Incident response

AI tooling

Education

Security certifications (OSCP, GCIA, GCIH, GREM)

Tools

Splunk

Elastic

SPL

KQL

Sigma

LangChain

AutoGen

Neo4j

Job description

ByLabs is seeking an AI SOC Engineer who blends offensive/defensive security with hands-on AI engineering to build the Security Brain, automating detection rule generation and alert suppression within fully automated security operations.

You will leverage LLMs and AI agents to keep pace with AI-powered adversaries, design detection scenarios from an attacker’s view, and drive adoption of AI SOC capabilities across threat hunting, incident response, and SecOps automation.