Responsibilities
- Design and implement advanced AI orchestration frameworks that integrate multiple AI agents and MCP servers to enable complex, multi-step security reasoning with reliable outcomes under pressure.
- Develop and scale a proactive threat hunting initiative from the ground up using custom AI agents and MCP functionalities to detect hidden threats and configuration inconsistencies across infrastructure.
- Establish a dynamic feedback loop between defensive security operations and an AI-powered offensive red team to enable self-remediating security systems.
- Collaborate across IT, security, DevOps, cloud, and compliance functions to ensure enterprise systems are built with native support for automation and intelligent response.
- Lead the architecture of end-to-end automated incident response workflows, replacing legacy SOAR systems with resilient, agent-driven orchestration from detection through recovery.
- Serve as a top-tier technical responder during critical security incidents, using real-world attack data to refine and harden automated defense mechanisms.
- Create and run automated adversarial simulations to verify the reliability and accuracy of detection pipelines and agentic response workflows against realistic attack patterns.
Compensation
Competitive salary and benefits package
Work Arrangement
Hybrid or remote work options available
Team
Part of the Security Engineering team focused on AI-driven security operations and automation
Responsibilities
- Building and AI Orchestration: Move beyond basic tool configuration to build, code, design and research advanced, framework-level approaches for chaining MCP servers and AI agents. You will optimize agentic networks for maximum performance, multi-step reasoning accuracy, and deterministic outcomes in high-stress security scenarios.
- Proactive Threat Hunting Program: Architect and scale a proactive threat hunting program from scratch. You will leverage custom agents, MCP capabilities, and security tooling to proactively discover complex vulnerabilities, configuration drift, and hidden threats across the infrastructure network.
- Advanced Purple Team Synergies: Forge a cutting-edge feedback loop between the Blue Team and our internally developed AI Red Team Agent. You will seamlessly bridge automated offense and defense, turning threat hunting insights into self-healing infrastructure.
- Cross-Functional Influence & Leadership: Act as a strategic engineering partner across IT, Security Engineering, DevOps, DevSecOps, Compliance, Cloud, and Infrastructure teams to ensure corporate systems are natively "automation-ready."
- E2E IR Automation Architecture: Own the overarching engineering roadmap for the end-to-end incident response lifecycle (Detection → Triage → Containment → Recovery), replacing traditional SOAR workflows with resilient, agentic orchestration.
- Incident Commander Escalation: Serve as a high-tier technical escalation point for active, complex incidents. Use every incident as an adversarial data point to design superior automated immune responses.
- Validate the Defense: Design, execute, and validate automated simulation testing to systematically prove that agentic workflows and detection pipelines trigger reliably against real-world attack behaviors.
Available for qualified candidates
