Principal, Cybersecurity Automation - Remote

Stryker; Portage (MI); À distance; USD 136 000 - 294 000; Plein temps

Résumé du poste

Stryker’s Principal Security Automation & AI Engineer leads the Cyber Defense automation and AI program. This hands-on role writes code, sets standards, and builds scalable patterns that reduce repetitive work while enabling analysts to focus on higher-value decisions.

You will design and operate AI-enabled security solutions, implement safeguards against risks like prompt injection and data leakage, collaborate across Security Architecture, Privacy, and IT, and mentor teams to raise the bar for

Qualifications

• Bachelor’s degree in cybersecurity, CS, IT, engineering, or related field.
• 8+ years of relevant cybersecurity/automation experience.
• Experience designing, deploying, and operating production security automation at enterprise scale.
• Strong Python development skills with SQL and API integrations (REST APIs, webhooks, authentication, OAuth).
• Experience building and operating production LLM-based solutions (AI agents, retrieval-augmented generation, evaluation).
• Experience implementing AI-specific security controls (prompt injection, data leakage, excessive agency).
• Understanding of SOC and incident response, detection engineering, MITRE ATT&CK.
• Experience with Git, code review, automated testing, CI/CD, and production support.

Responsabilités

• Own and prioritize the Cyber Defense automation roadmap based on analyst capacity, risk reduction, and business impact.
• Design, build, and operate automation for alert triage, enrichment, containment, case management, and notification.
• Extend automation across vulnerability management and threat intelligence including asset context and remediation tracking.
• Identify and implement high-value AI use cases across security operations (triage, investigations, reporting).
• Design, build, and operate AI agents with least privilege and human approval for consequential actions.
• Establish engineering standards, reusable patterns, and reference architectures for security automation and AI.

Connaissances

Python

SQL

APIs REST/Webhooks

OAuth

LLM integration

AI security controls

SOC & IR

Git & CI/CD

Code quality/testing

Technical leadership

Formation

Bachelor’s degree or equivalent

8+ years cybersecurity/automation experience

Outils

Microsoft Sentinel

Defender XDR

Splunk

CrowdStrike

ServiceNow

Azure OpenAI

Azure AI Foundry

AWS

Description du poste

Work Flexibility: Remote The Principal Security Automation & AI Engineer is the senior technical leader responsible for automation and AI across Cyber Defense. This role designs, builds, and operates scalable automation and AI solutions that reduce repetitive work, accelerate security operations, and allow analysts to focus on higher-value decision-making.

This is a hands-on engineering role. You will write code, establish technical standards, and build the foundational patterns others use. You will determine where AI can safely improve security operations, where human oversight is required, and measure the impact of solutions in production. All automation must be reliable, auditable, secure, and appropriate for the data it handles. Preference will be given to candidates located in Eastern or Central time zones to support effective collaboration during core business hours.

What You Will Do

Security Automation Own and prioritize the Cyber Defense automation roadmap based on analyst capacity gained, risk reduction, business impact, and implementation effort. Design, build, and operate automation for alert triage, enrichment, containment, case management, and notification. Extend automation across vulnerability management and threat intelligence, including asset context, remediation tracking, and indicator handling. Build and maintain integrations across endpoint security, detection engineering, security data platforms, asset inventory, threat intelligence, and ticketing systems.

AI & Agentic Security Identify and implement high-value AI use cases across security operations, including triage, investigation summaries, detection development, and reporting. Design, build, and operate AI agents and assistants using least privilege, scoped tool access, and human approval for consequential actions. Develop evaluation frameworks to measure accuracy, reliability, consistency, and failure modes before and after deployment. Implement safeguards against risks such as prompt injection, data leakage, and excessive agent permissions while keeping regulated data within approved environments. Evaluate vendor AI capabilities against internally developed solutions and provide clear build, buy, or wait recommendations.

Engineering Excellence Treat automation, detections, prompts, and AI configurations as code using version control, peer review, automated testing, CI/CD, and appropriate change controls. Operate production automation with monitoring, error handling, runbooks, rollback capabilities, and ongoing performance management. Partner with Security Architecture, Privacy, Legal, and IT teams to support responsible AI governance and risk management.

Technical Leadership Establish engineering standards, reusable patterns, and reference architectures for security automation and AI. Mentor engineers and analysts to expand safe, scalable automation capabilities across Cyber Defense. Define and report measurable outcomes such as analyst hours returned, time to triage and containment, automation coverage, reliability, and error rates. Translate complex automation and AI concepts, capabilities, risks, and limitations for technical teams and executive audiences.

Required Qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field, or an equivalent combination of education and relevant professional experience.

8+ years of relevant experience in cybersecurity, security engineering, software engineering, automation, or related technology disciplines.

Demonstrated experience designing, deploying, and operating production security automation at enterprise scale.

Strong Python development skills with working proficiency in SQL and API integrations, including REST APIs, webhooks, authentication, and OAuth.

Experience building and operating production LLM-based solutions, including AI agents, retrieval-augmented generation, prompt design, tool integration, and evaluation.

Experience implementing controls for AI-specific security risks, including prompt injection, data leakage, excessive agency, and inappropriate access.

Strong understanding of SOC and incident response operations, detection engineering, and MITRE ATT&CK.

Experience applying software engineering practices including Git, code review, automated testing, CI/CD, observability, and production support.

Demonstrated ability to establish technical direction and deliver complex solutions across teams through influence rather than direct authority.

Preferred Qualifications

Experience with enterprise SOAR and security automation platforms.

Hands-on experience integrating technologies such as Microsoft Sentinel, Microsoft Defender XDR, Splunk, CrowdStrike, ServiceNow, or comparable enterprise security platforms.

Experience with cloud and AI platforms such as Microsoft Azure, Azure AI Foundry, Azure OpenAI, AWS, or comparable technologies.

Experience designing agentic AI workflows that incorporate human-in-the-loop controls, evaluation frameworks, secure tool use, and production monitoring.

Knowledge of AI security and governance frameworks such as the NIST AI Risk Management Framework and OWASP guidance for LLM and generative AI applications.

Relevant cybersecurity, cloud, software engineering, or AI certifications are a plus.

Must be legally authorized to work in the U.S. and not require employment-based sponsorship now or in the future.

Pay Ranges

• USN: $135,600 - $225,900 USD Annual
• US5: $142,400 - $237,200 USD Annual
• US10: $149,200 - $248,500 USD Annual
• US15: $155,900 - $259,800 USD Annual
• US20: $162,700 - $271,100 USD Annual
• US30: $176,300 - $293,700 USD Annual

View the U.S. work location and transparency guide to find the pay range for your location.

Travel Percentage: 10%

Stryker Corporation is an equal opportunity employer.

Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status.

Stryker is an EO employer – M/F/Veteran/Disability.

Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.

Stryker is one of the world’s leading medical technology companies and, together with its customers, is driven to make healthcare better.

We offer innovative products and services in Orthopaedics, Medical and Surgical, and Neurotechnology and Spine that help improve patient and hospital outcomes.

We are proud to be named one of the World’s Best Workplaces! For more information, visit: www.stryker.com

Work Flexibility

Remote – Role allows you to work the majority to 100% of time from an alternate workplace. These roles could have travel expectations, and you must work within the country of the job requisition location.

Field-based – You can expect to regularly work a majority to 100% of time at customer facilities and has a set territory or expectation to travel within a set boundary. Almost all sales roles would likely be qualified as field‑based.

Onsite – Role is 100% located at a Stryker facility. Some ad hoc flexibility may be available depending on role, level, and job requirements. Manufacturing roles and any role that requires physical presence at the office would qualify under this category.

Hybrid – You can expect to regularly work in both an alternate workplace and a Stryker facility. Roles that are partially remote or co-located would qualify as hybrid, and the expectation to be onsite would be defined and agreed upon by your manager/supervisor.