Cyber Defense Monitoring Engineer – Automation & AI

Overview

Serve as a Cyber Defense Monitoring Level 3 engineer supporting advanced SOC operations and the development of AI-driven automation, detection, and response workflows.

What you'll do

• Design and deploy AI agents for triage, context gathering, and initial containment.
• Architect SOAR playbooks using Python, REST APIs, and SOAR platforms.
• Apply data analytics and machine learning to security datasets and SIEM alerts.
• Implement CI/CD, version control, and automated testing for detection logic.
• Engineer solutions to reduce MTTD and MTTR.
• Handle Level 3 escalation and direct response to complex security events.
• Conduct threat hunts and oversee SIEM, EDR, and NDR monitoring tools.

What you'll need

• 5+ years of progressive SOC or incident response experience.
• Advanced Python, Go, or PowerShell skills.
• Experience with REST APIs, JSON/XML, LLMs, prompt engineering, and AI orchestration frameworks.
• Knowledge of data science tools including Pandas, Jupyter, and SQL.
• Knowledge of network protocols, Windows/Linux internals, and MITRE ATT&CK.
• Hands-on experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, Torq, or Tines.
• BA/BS in Engineering, Computer Science, or Information Security.

Nice to have

• Security and engineering certifications such as GCIA, GCFA, AWS Certified Security/Machine Learning, or relevant SANS automation courses.

Details

• Location: Bangalore.