Lead Response Technology and Automation Security Engineer

Overview

Lead Response Technology and Automation Security Engineer for the Corporate Security Threat and Response Management RESPOND product team, focused on modernizing Security Operations (SecOps) incident investigation and response capabilities.

What you'll do

• Execute the RESPOND product roadmap with SOC and Incident Response teams in the region.
• Design, build, test, and maintain SOAR playbooks for incident triage and response.
• Build and operationalize AI-augmented response capabilities, including agentic AI workflows and prompt books/libraries.
• Define requirements and oversee connectors/integrations between SOAR, SIEM, EDR, identity, ticketing, threat intelligence, and AI/LLM platforms.
• Build and maintain response tooling such as scripts, live-response packages, and automation utilities.
• Embed with SOC and DFIR analysts to convert high-toil workflows into automated or AI-assisted playbooks.

What you'll need

• 5+ years of experience in security operations, incident response, detection engineering, or security automation engineering.
• Hands-on SOAR development experience using low-code/no-code or hyper-automation tools.
• Demonstrated enterprise experience with AI-augmented SOC concepts, including at least two specified areas (e.g., prompt books, Jupyter notebooks, LLM/agentic AI integrations, or agent-based AI workflows).
• Strong scripting skills in Python and PowerShell, plus basic Git repo management.
• Working knowledge of REST APIs, JSON, webhooks, and authentication patterns (OAuth, API keys, managed identities).
• Solid grounding in incident response fundamentals and the IR lifecycle.
• Hands-on experience with EDR, SIEM, identity, and cloud platforms/products listed in the posting.

Details

• Location: Pune, India.