> Markdown version of [/jobs/ext/2011994-cyber-manager-ai-soc](https://www.wearedevelopers.com/jobs/ext/2011994-cyber-manager-ai-soc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Manager - AI SOC - **Company:** Deloitte T.T.L. - **Location:** San Antonio, TX, United States - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Cyber Security, Intrusion Detection and Prevention, Python (Programming Language), Security Information and Event Management, Systems Integration, Workflow Management Systems, Scripting, Data Ingestion, Cyber Warfare, Data Pipelines, Security Orchestration, Automation & Response - **Published:** August 10, 2026 - **Apply:** https://us.experteer.com/career/view-jobs/cyber-manager-ai-soc-san-antonio-tx-usa-58884345 ## About the Role Guide * Guide automation and AI applications to security use cases such as triage, workflow orchestration, alert summarization, and response recommendations * Mentor junior practitioners and contribute reusable accelerators and implementation patterns for client delivery and practice growth Tasks * 10+ years in security operations, detection engineering, security engineering, or enterprise cyber defense * Hands-on experience designing, implementing, and optimizing SIEM, SOAR, detection, telemetry, and response workflows * Experience building and maintaining integrations, automations, and engineering workflows using Python or similar scripting language * Experience working directly with clients or internal stakeholders to translate requirements into technical solutions * Ability to travel 50% on average * Limited immigration sponsorship may be available * Bachelor's degree in related field or equivalent work experience Key requirements * ## Description Experteer Overview In this role you will lead hands-on security engineering work to modernize security operations across SIEM, SOAR, telemetry, and AI-enabled workflows, with embedded client-facing engagements. You translate operational needs into production-ready security capabilities and drive implementations in live environments. You'll mentor teammates and develop reusable engineering assets to support client delivery and practice growth. This position offers the chance to shape security operations for diverse clients while advancing Deloitte's resilience initiatives. Compensation / Benefits * Design and implement secure, scalable security operations solutions across SIEM, SOAR, telemetry, case management, and response platforms * Act as embedded engineering lead with client teams to translate workflows into production-ready security capabilities * Oversee deployment of log ingestion, normalization, enrichment, routing, detection, and orchestration via APIs, connectors, and data pipelines * Guide automation and AI applications to security use cases such as triage, workflow orchestration, alert summarization, and response recommendations * Mentor junior practitioners and contribute reusable accelerators and implementation patterns for client delivery and practice growth Tasks * 10+ years in security operations, detection engineering, security engineering, or enterprise cyber defense * Hands-on experience designing, implementing, and optimizing SIEM, SOAR, detection, telemetry, and response workflows * Experience building and maintaining integrations, automations, and engineering workflows using Python or similar scripting language * Experience working directly with clients or internal stakeholders to translate requirements into technical solutions * Ability to travel 50% on average * Limited immigration sponsorship may be available * Bachelor's degree in related field or equivalent work experience Key requirements * ## Related Videos - [Automated Security for the Entire SDLC](https://www.wearedevelopers.com/videos/100323-automated-security-for-the-entire-sdlc) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Navigating the AI Wave in DevOps](https://www.wearedevelopers.com/videos/853-navigating-the-ai-wave-in-devops) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) ## Related Articles - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 137 - AI'm not sure about this](https://www.wearedevelopers.com/magazine/485-dev-digest-137-ai-m-not-sure-about-this) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)