Senior AI-SOC Engineer | Automation & ML

AgileGrid Solutions; United States; On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health insurance

Retirement plans

Paid time off

Job summary

Optimum seeks a Senior SOC Engineer specialized in AI and Automation to design and maintain AI-driven detection and automation within the SOC. You will drive incident response, lead complex investigations, and guide improvements across on-prem and cloud environments.

You will apply strong Python programming, AI/ML experience, and knowledge of MITRE ATT&CK, NIST standards, and SOAR platforms to elevate detection capabilities and response efficiency.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or related field, or equivalent experience.
• 7+ years of combined experience in security operations, incident response, and software engineering.
• Hands-on incident response and digital forensics experience with major security incidents.
• Strong Python programming and software engineering practices (version control, CI/CD, automated testing).
• Experience with AI/ML models, LLMs, prompt engineering, and retrieval-augmented generation.
• Familiarity with SOAR platforms, detection engineering, and security data pipelines.
• Knowledge of SOC operations, MITRE ATT&CK, NIST incident response standards, and cloud security.
• Awareness of AI/LLM security risks and OWASP LLM Top 10; ability to communicate concepts to technical and non-technical stakeholders.

Responsibilities

• Design, develop, and maintain AI/ML and automation-driven capabilities for detection, triage, and response.
• Build and manage SOAR automations and detection-as-code pipelines with proper version control and testing.
• Integrate LLMs and agentic AI tools into SOC workflows; develop prompts and evaluation frameworks.
• Benchmark and optimize AI models for security use cases; improve precision and MTTR metrics.
• Develop data pipelines and feature engineering using security telemetry data.
• Implement MLOps practices including versioning, monitoring, and retraining of models.
• Establish data governance, guardrails against prompt injection, and privacy safeguards.
• Collaborate with detection engineers, analysts, and responders to operationalize AI tools.
• Serve as escalation point during complex incidents and lead incident response.
• Lead forensic investigations across on-prem and cloud environments; provide expert guidance.
• Conduct post-incident reviews and translate findings into improved detection and playbooks.
• Develop incident response playbooks and tabletop exercises.
• Define and monitor detection and incident metrics like MTTD/MTTR.

Skills

Python

Incident response

Forensics

SOAR platforms

AI/ML models

Prompt engineering

Data pipelines

CI/CD

Automated testing

Cloud security

Cross-team communication

Security operations

Education

Bachelor's degree in CS

Tools

SOAR platforms

ML frameworks

Job description

Optimum seeks a Senior SOC Engineer specialized in AI and Automation to design and maintain AI-driven detection and automation within the SOC. You will drive incident response, lead complex investigations, and guide improvements across on-prem and cloud environments.

You will apply strong Python programming, AI/ML experience, and knowledge of MITRE ATT&CK, NIST standards, and SOAR platforms to elevate detection capabilities and response efficiency.