Senior AI Threat Detection Engineer - SOC Automation Lead

Vanguard; Dallas (TX); Hybrid; USD 130,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Vanguard is seeking an AI Threat Detection Engineer, Senior Specialist to advance AI-driven capabilities within our Security Operations Center. You will build automation, develop AI agents, and design LLM-based workflows to enhance threat detection and incident response.

You will collaborate with senior engineers and cross-functional teams to deliver secure, scalable solutions, mentor junior staff, and stay current with AI advances while contributing to SOC modernization.

Qualifications

• 4+ years programming or scripting experience.
• 5+ years with cloud platforms such as AWS or Azure.
• 4+ years building automation solutions (SOAR, GitHub) or similar.
• 4+ years working with security technologies or supporting SOC operations.
• Exposure to AI/GenAI/LLM-based solutions preferred.
• Familiarity with security telemetry (logs, alerts, endpoints, network, cloud).
• 5+ years exposure to SIEM or detection engineering concepts.

Responsibilities

• Leads and responds to escalated cyber security alerts, cyber incidents, or related security investigations.
• Identifies real-time complex attack patterns and suggests mitigation strategies.
• Leads processes and measures to monitor and detect compromises, risks, vulnerabilities, and network threats.
• Facilitates security operations and incident response technologies and methodologies.
• Develops, manages, maintains and enhances security controls (alerts, rules, policies, signatures).
• Develop and enhance AI agents to streamline SOC operations and improve efficiency.
• Design and optimize prompts and workflows to support LLM-based security use cases.
• Evaluate emerging AI technologies and contribute to innovation within the SOC.
• Implement safeguards and controls to ensure secure and responsible AI usage.
• Build APIs, integrations, and automation workflows to support AI-driven capabilities.
• Write clean, maintainable, and production-ready code aligned with engineering best practices.
• Collaborate with security, engineering, and platform teams to deliver AI-enabled solutions.
• Support AI agent development and deployment across SOC use cases.
• Stay current on AI advancements and apply best practices to ongoing work.
• Mentors junior team members to improve their technical acumen.
• Participates in special projects and performs other duties as assigned.

Skills

Python/Java/Shell

Cloud platforms

SOAR/GitHub automation

Security operations / SOC

AI/GenAI/LLM exposure

Security telemetry / SIEM

Tools

GitHub

SOAR

LLM tooling

Job description

Vanguard is seeking an AI Threat Detection Engineer, Senior Specialist to advance AI-driven capabilities within our Security Operations Center. You will build automation, develop AI agents, and design LLM-based workflows to enhance threat detection and incident response.

You will collaborate with senior engineers and cross-functional teams to deliver secure, scalable solutions, mentor junior staff, and stay current with AI advances while contributing to SOC modernization.