Senior IT Security Engineer — Lead AI & SOC (Hybrid)

Belk, Inc. & Belk eCommerce LLC.; United States; On-site; USD 170,000 - 210,000; Full time

Job summary

Belk, Inc. and Belk eCommerce LLC. seek a Sr Security Engineer to deploy and optimize security tooling, monitor cloud and AI/ML environments, and lead incident response and threat hunting.

You will develop automation for detections and playbooks across SIEM, XDR, and EDR ecosystems, mentoring the security team. The role emphasizes protecting enterprise infrastructure, generative AI pipelines, and ensuring secure agent execution with strong focus on prompt injections and data leakage.

Qualifications

• Bachelor’s degree in Computer Science or related field or equivalent combination of education and professional experience.
• 5+ years scripting experience in Python or PowerShell.
• 5+ years experience writing SIEM queries, parsers, and alerts.

Responsibilities

• Lead security operations and automate detection and incident response across SIEM/XDR/EDR and other tools.
• Design defensive solutions for enterprise AI tools, LLM pipelines, and autonomous AI agents.
• Lead incident response, threat hunting, and SOC efficiency improvements.
• Mentor security team members and organize security operations across cloud environments.

Skills

Security engineering

SIEM & analytics

Threat hunting

Incident response

Automation scripting

Cloud security

AI security

Python

PowerShell

Education

Bachelor’s degree in Computer Science or related field

10–15 years IT/Cyber Security experience

Tools

Splunk

Microsoft Sentinel

Elastic

CrowdStrike Falcon

SentinelOne

Microsoft Defender

Palo Alto Cortex XSOAR

Swimlane

Job description

Belk, Inc. and Belk eCommerce LLC. seek a Sr Security Engineer to deploy and optimize security tooling, monitor cloud and AI/ML environments, and lead incident response and threat hunting.

You will develop automation for detections and playbooks across SIEM, XDR, and EDR ecosystems, mentoring the security team. The role emphasizes protecting enterprise infrastructure, generative AI pipelines, and ensuring secure agent execution with strong focus on prompt injections and data leakage.