Hybrid AI-Driven Security Automation Engineer

TransUnion LLC; Crum Lynne (PA); Hybrid; USD 113,000 - 188,000; Full time

Benefits offered by this job

401(k) with employer match

Employee Stock Purchase Plan (ESPP)

Tuition Reimbursement

Paid holidays

Commuter benefits

Health insurance

Job summary

TransUnion LLC seeks a senior cybersecurity engineer to lead the design and maintenance of security automations on the agentic AI SOC platform. You will migrate existing Splunk SOAR playbooks, build end-to-end workflows, and integrate SIEM/EDR/ITSM tools via REST APIs and webhooks.

You will develop Python-based tools, contribute to CI/CD, and evaluate model outputs with a human-in-the-loop review. This hybrid role reports to the Information Security Engineering Manager.

Qualifications

• 10+ years of experience in security engineering, security automation, or software engineering with a cybersecurity focus.
• Hands-on experience with SOAR or security automation platforms (e.g., Splunk SOAR, Cortex XSOAR, Tines, Torq).
• Experience with modern LLM platforms and agent design, prompt design, tool-use patterns, and model-output evaluation.
• Knowledge of SOC operations, incident response workflows, and MITRE ATT&CK framework.
• Strong software engineering fundamentals and distributed team collaboration.

Responsibilities

• Lead design, development, and maintenance of security response automations on the agentic AI SOC platform.
• Build end-to-end agentic workflows including prompt design, tool integration, guardrails, and human-in-the-loop review.
• Develop integrations across SIEM, EDR, threat intel, case management, and ITSM using REST APIs and webhooks.
• Build internal tools and APIs in Python to extend platform capabilities and reduce analyst workload.
• Administer and improve the case management platform and workflows.
• Collaborate with engineering teams to convert detections into automated responses.

Skills

Python

REST APIs

OAuth

CI/CD

LLM tooling

Git

Security automation

Tools

Splunk SOAR

Cortex XSOAR

Tines

Torq

Job description

TransUnion LLC seeks a senior cybersecurity engineer to lead the design and maintenance of security automations on the agentic AI SOC platform. You will migrate existing Splunk SOAR playbooks, build end-to-end workflows, and integrate SIEM/EDR/ITSM tools via REST APIs and webhooks.

You will develop Python-based tools, contribute to CI/CD, and evaluate model outputs with a human-in-the-loop review. This hybrid role reports to the Information Security Engineering Manager.