Senior AI-Driven SOC Engineer: Lead Incidents & Automations

Optimum; Bethpage (NY); On-site; USD 100,000 - 165,000; Full time

Job summary

Optimum is seeking a Senior SOC Engineer (AI & Automation) to design, build, and operate AI-driven detection, triage, and response tooling for our Security Operations Center.

Bridging security operations and software engineering, you will develop AI-driven detection, triage, and response tooling, integrate large language model (LLM) and agentic workflows into analyst operations, and ensure those capabilities are accurate, safe, measurable, and continuously improved.

Qualifications

• Bachelor's degree in CS, Engineering, or related field, or equivalent years of experience.
• 7+ years of combined experience across security operations, incident response, and software engineering.
• Hands‑on incident response and digital forensics experience, leading or coordinating response to complex incidents preferred.
• Strong programming skills (e.g., Python) and sound software‑engineering practices, including version control, CI/CD, and automated testing.
• Hands‑on experience building with AI/ML, including large language models, prompt engineering, retrieval‑augmented generation (RAG), and/or agentic frameworks.

Responsibilities

• Design, build, and maintain AI/ML- and automation-driven capabilities for alert enrichment, correlation, summarization, triage, and prioritization.
• Develop and maintain SOAR automations and detection-as-code pipelines that are version-controlled, tested, and peer-reviewed.
• Integrate LLM and agentic AI tooling into SOC workflows; engineer prompts, guardrails, and evaluation harnesses.
• Evaluate, benchmark, and tune AI models and tools for security use cases, measuring precision and recall, false-positive reduction, and MTTR impact.
• Build data pipelines from security telemetry to support detection and ML use cases.
• Apply MLOps practices including model versioning, monitoring, drift detection, retraining for production security models.
• Ensure responsible and secure AI use, including governance, prompt-injection defense, privacy, and output validation.
• Partner with detection engineers and incident responders to operationalize tooling and feed lessons learned back into models.

Skills

AI/ML

Security operations

Incident response

Data engineering

Cloud security

Leadership

Python

Education

Bachelor's degree in CS or related field

Tools

CI/CD

LLMs

RAG

Agentic AI

Job description

Optimum is seeking a Senior SOC Engineer (AI & Automation) to design, build, and operate AI-driven detection, triage, and response tooling for our Security Operations Center.

Bridging security operations and software engineering, you will develop AI-driven detection, triage, and response tooling, integrate large language model (LLM) and agentic workflows into analyst operations, and ensure those capabilities are accurate, safe, measurable, and continuously improved.