Senior AI-Driven Security Automation Engineer

TransUnion LLC; Reston (VA); Hybrid; USD 113,000 - 188,000; Full time

Job summary

TransUnion LLC is seeking an Advisor, Cybersecurity to lead automation of security response workflows on the agentic AI SOC platform. The role spans design, development, and maintenance of integrations across SIEM/EDR, cloud and on-prem environments, and collaboration with distributed teams to enhance threat response.

Ideal candidates have 10+ years in security engineering or related fields, hands-on SOAR experience, and proficiency with modern LLM-enabled tooling and security best practices.

Qualifications

• 10+ years of security engineering, security automation, or software engineering with cybersecurity focus.
• Hands-on experience with SOAR or security automation platforms (Splunk SOAR, Cortex XSOAR, Tines, Torq).
• Experience with large language model platforms (Anthropic Claude, OpenAI, Amazon Bedrock) including agent design and tool-use patterns.
• Knowledge of Security Operations Center operations, incident response, MITRE ATT&CK framework.

Responsibilities

• Lead design, development, and maintenance of security response automations on the agentic AI SOC platform, including migration of existing playbooks.
• Build end-to-end agentic workflows with prompt design, tool integration, guardrails, and human-in-the-loop review.
• Develop integrations across SIEM, EDR, threat intel, case management, and ITSM via REST APIs and event-driven patterns.
• Create internal tools and APIs in Python to expand platform capabilities and reduce analyst workload.
• Administer and improve the case management platform and its workflows.
• Collaborate with detection engineering to convert detections into automated responses.
• Contribute to engineering standards with Git, testing, and CI/CD.

Skills

SOAR platforms

Python development

REST APIs

Git & CI/CD

Agent design

Tools

Splunk SOAR

Cortex XSOAR

Tines

Torq

Anthropic Claude

Job description

TransUnion LLC is seeking an Advisor, Cybersecurity to lead automation of security response workflows on the agentic AI SOC platform. The role spans design, development, and maintenance of integrations across SIEM/EDR, cloud and on-prem environments, and collaboration with distributed teams to enhance threat response.

Ideal candidates have 10+ years in security engineering or related fields, hands-on SOAR experience, and proficiency with modern LLM-enabled tooling and security best practices.