Senior AI Threat Detection Architect for SOC Automation

The Vanguard Group; Dallas (TX); Hybrid; USD 120,000 - 180,000; Full time

Job summary

The Vanguard Group is seeking an AI Threat Detection Engineer, Senior Specialist to advance security operations with AI-driven capabilities. You will develop automation, build AI agents, and collaborate across security, engineering, and platform teams to modernize the SOC.

Leverage Python, cloud platforms, and SIEM experience to design scalable detections, workflows, and secure AI usage. This role supports a hybrid work model and encourages continuous learning and innovation.

Qualifications

• 4+ years of hands-on programming or scripting experience.
• 5+ years on cloud platforms (AWS or Azure).
• 4+ years building or supporting automation solutions (e.g., SOAR, GitHub).
• 4+ years working with security technologies or SOC operations.
• Exposure to AI/GenAI/LLM-based solutions, with hands-on development preferred.
• Familiarity with security telemetry (logs, alerts, endpoint, network, and cloud data).
• 5+ years of exposure to SIEM platforms or detection engineering concepts.

Responsibilities

• Lead escalated cyber security alerts, incidents, or investigations. Identify real-time attack patterns and mitigation strategies.
• Monitor and detect compromises, risks, vulnerabilities, network threats, and actor TTPs; facilitate incident response technologies.
• Develop, manage, maintain, and enhance security controls for security platforms (alerts, rules, policies, signatures).
• Develop and enhance AI agents to streamline SOC operations and improve efficiency.
• Design and optimize prompts/workflows for LLM-based security use cases.
• Evaluate emerging AI technologies and contribute to SOC innovation.
• Implement safeguards and controls to ensure secure AI usage.
• Build APIs, integrations, and automation workflows to support AI-capable systems.
• Write clean, production-ready code aligned with engineering best practices.
• Collaborate with security, engineering, and platform teams to deliver AI-enabled solutions.
• Support AI agent development and deployment across SOC use cases.
• Stay current on AI advancements and apply best practices.
• Mentor junior team members to improve technical acumen.
• Participate in special projects and other duties as assigned.

Skills

Python

Java

Shell

AWS

Azure

SOAR

Tools

GitHub

SOAR

Job description

The Vanguard Group is seeking an AI Threat Detection Engineer, Senior Specialist to advance security operations with AI-driven capabilities. You will develop automation, build AI agents, and collaborate across security, engineering, and platform teams to modernize the SOC.

Leverage Python, cloud platforms, and SIEM experience to design scalable detections, workflows, and secure AI usage. This role supports a hybrid work model and encourages continuous learning and innovation.