Manager, Cyber Automation & Detection Engineering (AI)

About the role

We are looking for an experienced Manager to lead autonomous SOC engineering, AI‑driven security automation and detection engineering. The role will shape the transition from traditional analyst‑led SOC operations to an AI‑assisted, highly automated model, driving design, deployment and continuous improvement of next‑generation security capabilities.

Key responsibilities

• Lead technical design and deployment of AI‑enabled autonomous SOC processes, including alert triage, investigation, enrichment, containment and response.
• Develop and integrate LLM/GenAI tools such as analyst copilots, automated investigation, incident summarisation and response recommendations, with appropriate human‑in‑the‑loop controls.
• Design, build and maintain automated security workflows and orchestration playbooks across SIEM, SOAR, EDR/XDR, threat intelligence, email, identity and cloud security platforms.
• Implement automation using Python, REST APIs, webhooks, SDKs and scripting, ensuring robust error handling, logging and monitoring.
• Lead detection engineering efforts: design, test, tune and maintain security detection rules and use cases to improve detection quality and reduce false positives.
• Collaborate with stakeholders to define an Autonomous SOC roadmap and progressively increase automation maturity.

Required profile

• Proven experience in security operations, automation engineering and AI‑enabled SOC environments.
• Hands‑on expertise with SIEM, SOAR, EDR/XDR and threat intelligence platforms.
• Strong understanding of AI/GenAI concepts and their application to security workflows.
• Ability to translate SOC use cases into scalable, production‑grade automation.

Required skills

• SIEM
• SOAR
• EDR/XDR
• Threat intelligence platforms
• APIs and LLM/GenAI integration
• Python programming
• REST APIs, webhooks, SDKs
• Scripting and automation orchestration tools
• Detection rule development and tuning