Introduction

Tasks

• Design, implement, and maintain AI-assisted automation workflows and playbooks (e.g. for alert enrichment, triage, investigation, response).
• Drive automation efforts based on the technology that best fits the use case, including using generative AI (agents / LLMs), discriminative machine learning and scripting.
• Validate AI outputs and ensure human approval for critical security decisions.
• Integrate SIEM, SOAR, EDR/XDR, threat intelligence, ticketing, and other security tools.
• Support continuous improvement processes such as detection engineering and rule tuning.
• Strengthen cybersecurity analysts in the analysis and triage of security events.
• Collaborate closely with the globally established infrastructure operations teams (e.g. malware defense or vulnerability management).
• Create internal team documentation (e.g. SOPs, reference standards, architecture (diagrams).
• Consult in projects and initiatives to assess and mitigate security risks related to AI systems, including prompt injection, data leakage, and misuse.
• Possibility of working in a shift model in the future.

Placeholder Job Ad Video (do not remove)

Qualifications

• Engineering degree in Computer Science, Information Security from reputed college/ university.
• 5-8 years of professional experience in cybersecurity in a multinational company.
• Experience with security tools and technologies such as SIEM systems, SOAR, firewalls, intrusion detection systems and anti-virus software.
• Excellent knowledge of AI/ML automation with experience in applying those in a SOC / CDC environment.
• Ability to turn operational SOC / CDC challenges into reliable automation solutions.
• Advanced knowledge about threats to AI systems, attack vectors and potential mitigations.
• Strong scripting or programming skills, preferably Python.
• Good knowledge of various common log formats, application interfaces (e.g. REST API) as well as knowledge of GIT and CI/CD (Jenkins, Docker , …).
• Experience with Windows and Linux operating systems.
• Knowledge of security frameworks and standards such as MITRE ATT&CK, NIST, ISO 27001
• Certifications such as SANS GSOC, Certified SOC Analyst, CISSP or similar are added advantage.
• Experience in IT service management (e.g. ITIL) is preferred.
• Excellent communication skills with fluency in speaking & writing English; German is added advantage.

Contact and further information