AI SOC Engineer

Relevant Experience (in Yrs.): 8+

· Design and develop AI agents using LLMs/ML for security use cases such as alert triage, incident summarization, and threat hunting.

· Integrate AI solutions with SOC tools including SIEM, SOAR (e.g., Elastic, Tines), EDR, and Threat Intelligence platforms.

· Build autonomous decision-making logic and playbooks for adaptive, AI-driven SOC operations.

· Apply NLP and LLM techniques to process logs, alerts, and threat intelligence into actionable insights.

· Develop scalable Python-based solutions using API-driven and event-based architectures.

· Leverage agent frameworks such as LangChain, AutoGen, CrewAI, or Semantic Kernel to build intelligent workflows.

· Implement contextual correlation using vector databases and/or knowledge graphs.

· Align detection and response strategies with MITRE ATT&CK framework.

· Implement human-in-the-loop mechanisms to ensure safe and controlled AI-driven SOC actions.

· Work with large-scale security telemetry including logs, network, endpoint, and cloud data.

Must Skills:

· AI/ML solutions

· SOC tools (SIEM/SOAR, EDR, Threat Intelligence platforms).

· APIs, microservices, and event-driven architectures

· Python

· LLM frameworks (LangChain, AutoGen, CrewAI, Semantic Kernel).

· NLP techniques and LLM applications