AI-Driven SOC Security Engineer

NCR Voyix; Atlanta (GA); On-site; USD 120,000 - 150,000; Full time

Job summary

NCR Voyix in Atlanta, GA seeks a Cyber Security AI Engineer to design, develop, and operationalize AI-driven cybersecurity capabilities for the SOC. You will partner with Threat Intelligence, Incident Response, and Security Engineering to build intelligent detection models and automate workflows.

Ideal candidates bring 3+ years in cybersecurity, ML/AI development, and strong SIEM/EDR experience, plus hands-on scripting with Python/PowerShell and API development.

Qualifications

• 3+ years of experience in Cybersecurity, Security Operations, Security Engineering, Detection Engineering, or Incident Response.
• 2+ years of experience developing automation, analytics, AI, or machine learning solutions.
• Strong understanding of SOC operations, incident response, threat hunting, and threat intelligence.
• Experience with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or Elastic.
• Experience with EDR/XDR platforms such as Microsoft Defender, CrowdStrike, SentinelOne, or Palo Alto Cortex.
• Experience with Python, PowerShell, SQL, and API development.
• Knowledge of machine learning concepts including anomaly detection, classification, clustering, and behavioral analytics.
• Experience integrating and leveraging Large Language Models (OpenAI, Azure OpenAI, Microsoft Security Copilot, Anthropic, or comparable technologies).
• Experience building automation using SOAR platforms and workflow orchestration tools.

Responsibilities

• AI-Driven Security Operations: design, develop, and maintain AI/ML solutions to improve threat detection and investigations.
• Incident Response Support: assist investigations, containment, and post-incident reviews.
• Security Detection Engineering: develop detection logic across SIEM/EDR/XDR and cloud security.
• Threat Intelligence & Threat Hunting: train models with threat intel and conduct AI-enhanced hunting.
• Security Automation & Orchestration: implement automation using SOAR, APIs, and AI workflows.

Skills

Cybersecurity

Security Operations

Automation

AI / ML

Python

PowerShell

SQL

APIs

LLMs

SOAR workflows

Tools

Microsoft Sentinel

Splunk

QRadar

Elastic

Microsoft Defender

CrowdStrike

SentinelOne

Palo Alto Cortex

Job description

NCR Voyix in Atlanta, GA seeks a Cyber Security AI Engineer to design, develop, and operationalize AI-driven cybersecurity capabilities for the SOC. You will partner with Threat Intelligence, Incident Response, and Security Engineering to build intelligent detection models and automate workflows.

Ideal candidates bring 3+ years in cybersecurity, ML/AI development, and strong SIEM/EDR experience, plus hands-on scripting with Python/PowerShell and API development.