USA remote
AI & Automation Engineer
About this role
The Cyber Security Engineering team is seeking a dynamic AI & Automation Engineer to build and support the critical technologies that enable our Information Security and Incident Response teams. Operating in a highly collaborative, hybrid Agile/Scrum environment, you will leverage Python and Golang to develop robust scripting, orchestrate tasks within Cortex XSOAR, and streamline complex security operations. Beyond traditional SOAR engineering, you will play a pivotal role in our AI enablement journey by exploring, securing, and implementing cutting-edge technologies like Retrieval-Augmented Generation (RAG), Agent-to-Agent communications, and the Model Context Protocol (MCP).
We are looking for a strong software engineer with a passion for learning emerging AI concepts who can effectively partner with cross-functional teams to automate our defenses and accelerate incident response. Responsibilities: Automation Script Development: Write, maintain, and optimize efficient scripts using Python and Golang to automate routine security and incident response tasks. SOAR Platform Orchestration: Develop and manage playbooks, workflows, and integrations within the Cortex XSOAR platform to accelerate incident resolution.
Cross-Functional Collaboration: Partner closely with security analysts and cross-functional stakeholders to gather requirements and deliver impactful solutions. Agile Sprint Participation: Actively engage in daily stand-ups, sprint planning, and retrospectives to ensure continuous delivery within our Agile framework. AI Implementation Support: Assist in designing and implementing emerging AI technologies, including RAG architectures, to enhance security team capabilities.
Agent Communication Design: Build and test reliable Agent-to-Agent communication workflows that support intelligent, automated decision-making processes. MCP Integration Support: Assist in the development, integration, and security of the Model Context Protocol (MCP) to standardize our AI interactions. API Integration Management : Connect disparate internal systems and third-party security tools using robust RESTful API integrations.
Continuous Technology Learning: Dedicate time to researching and experimenting with the latest advancements in AI and automation to identify new operational efficiencies. Code Testing Review: Conduct peer code reviews and implement automated testing to maintain a high-quality, secure, and reliable codebase. Technical Documentation Creation: Create and maintain comprehensive documentation for developed scripts, playbooks, and AI integrations to ensure team-wide knowledge sharing.