Senior SOC AI & Automation Engineer

Optimum; Norwalk (CT); On-site; USD 100,000 - 165,000; Full time

Job summary

Optimum is seeking a Senior SOC Engineer (AI & Automation) to design, build, and operate AI-driven detection, triage, and response tooling for our Security Operations Center. You will bridge security operations and software engineering, developing AI-powered detections, prompts, guardrails, and playbooks, and lead investigations during major incidents.

As a senior engineer, you will mentor analysts, own incident-response playbooks, and implement MLOps practices, coordinating with detection

Qualifications

• Hands-on incident response and digital forensics experience.
• Strong programming skills (e.g., Python) and software-engineering practices (version control, CI/CD, automated testing).
• Hands-on experience building with AI/ML, including LLMs, prompt engineering, retrieval-augmented generation (RAG), and/or agentic frameworks.
• Experience with SOAR/automation and detection engineering (detection-as-code).

Responsibilities

• Design, build, and maintain AI/ML- and automation-driven capabilities for alert enrichment, correlation, summarization, triage, and prioritization.
• Develop and maintain SOAR automations and detection-as-code pipelines that are version-controlled, tested, and peer-reviewed.
• Integrate LLM and agentic AI tooling into SOC workflows (copilots, auto-triage agents); engineer prompts, guardrails, and evaluation harnesses.
• Evaluate, benchmark, and tune AI models and tools for security use cases, measuring precision and recall, false-positive reduction, and MTTR impact.
• Build data pipelines and feature engineering from security telemetry to support detection and machine-learning use cases.
• Apply MLOps practices, including model versioning, monitoring, drift detection, and retraining, to security models running in production.

Skills

Python

Incident response

Data engineering

Cloud security

Communication

Education

Bachelor's degree in Computer Science, Engineering, or related field

Tools

Git

CI/CD

SOAR

RAG

LLM tooling

Job description

Optimum is seeking a Senior SOC Engineer (AI & Automation) to design, build, and operate AI-driven detection, triage, and response tooling for our Security Operations Center. You will bridge security operations and software engineering, developing AI-powered detections, prompts, guardrails, and playbooks, and lead investigations during major incidents.

As a senior engineer, you will mentor analysts, own incident-response playbooks, and implement MLOps practices, coordinating with detection