Lead AI-Powered Cybersecurity Counter Threat Engineer

Royal Caribbean Group; Miami (FL); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Onsite in Miramar

Job summary

Royal Caribbean Group in Miramar, Florida is seeking a Lead Engineer, Cybersecurity Counter Threat Management to architect, build, and operate AI-driven automation that strengthens our security posture at enterprise scale.

You will work at the intersection of AI/ML, security engineering and DevSecOps, owning end-to-end integrations with CrowdStrike, Splunk and ServiceNow while mentoring engineers to reduce MTTR and elevate threat management capabilities.

Qualifications

• 6+ years in software, cybersecurity and/or automation engineering.
• Expert-level Python and/or Node.js for building scalable integrations and automation.
• Proven experience designing with LLM APIs and agentic frameworks in enterprise environments.
• Deep hands-on experience with security platforms (SIEM/SOAR, EDR, firewalls) and their APIs.
• Security certifications (CySA+, CISSP, AWS Security Specialty, OSCP).
• Familiarity with Splunk SPL, KQL, or similar query languages at scale.
• Background in red team, threat hunting, or detection engineering.
• Prior experience in a SOC, MSSP, or enterprise security operations environment.

Responsibilities

• Architect and deploy AI-powered automation workflows for security use cases including threat detection, incident response, vulnerability triage, and compliance monitoring.
• Build and maintain production-grade AI agents and orchestration pipelines that integrate deeply with security tooling (SIEM, EDR, SOAR, firewalls, identity platforms).
• Lead development of LLM-based solutions for log analysis, alert enrichment, and natural language querying of security data.
• Own end-to-end integrations with platforms such as CrowdStrike, Splunk, ServiceNow, and cloud security services.
• Act as a technical SME for SOC analysts and incident responders — identifying high-value automation opportunities, owning delivery, and measuring impact on MTTR.
• Define and enforce standards for AI automation security: least privilege, secrets management, audit logging, and prompt injection controls.
• Evaluate emerging AI models, agentic frameworks, and cybersecurity tooling — translating them into actionable capability roadmap items.
• Mentor junior engineers and provide technical guidance across cross-functional security and engineering teams.

Skills

Python

Node.js

AI/LLM systems

Security analytics

Education

CySA+

CISSP

AWS Security Specialty

OSCP

Tools

SIEM/SOAR

EDR

CrowdStrike

Splunk

ServiceNow

AWS Bedrock

LangChain

KQL

Job description

Royal Caribbean Group in Miramar, Florida is seeking a Lead Engineer, Cybersecurity Counter Threat Management to architect, build, and operate AI-driven automation that strengthens our security posture at enterprise scale.

You will work at the intersection of AI/ML, security engineering and DevSecOps, owning end-to-end integrations with CrowdStrike, Splunk and ServiceNow while mentoring engineers to reduce MTTR and elevate threat management capabilities.