Cyber Manager - AI SOC

Deloitte T.T.L.
Seattle, WA, United States
1 day ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
10 years minimum
Working hours
Regular working hours

Tech stack

Application Programming Interfaces (APIs) Artificial Intelligence Cyber Security Intrusion Detection and Prevention Python (Programming Language) Security Information and Event Management Systems Integration Scripting Data Ingestion Cyber Warfare Data Pipelines Security Orchestration, Automation & Response

Job description

Experteer Overview In this role you will lead hands-on security engineering to modernize operations across SIEM, SOAR, telemetry, and AI-enabled workflows. You will work embedded with client teams to translate operational needs into production-ready security capabilities and integrations. You’ll guide deployments, drive automation, and mentor junior practitioners, shaping secure, scalable cyber defense programs. This position combines technical delivery with client collaboration to improve resilience and incident response. Compensation / Benefits * Design and implement secure, scalable security operations solutions across SIEM, SOAR, telemetry, case management, and response platforms * Serve as an embedded engineering lead with client teams to translate requirements into production-ready security capabilities * Oversee deployment of log ingestion, normalization, enrichment, routing, detection, and orchestration workflows via APIs, connectors, and data pipelines * Guide the application of automation and AI to security operations use cases such as triage, workflow orchestration, alert summaries, and response recommendations * Mentor junior practitioners and contribute reusable engineering assets, accelerators, and implementation patterns for client delivery and practice growth Tasks * Bachelor’s degree or equivalent work experience * 10+ years in security operations, detection engineering, security engineering, or enterprise cyber defense * Hands-on design, implementation, and optimization of SIEM, SOAR, telemetry, and response workflows across enterprise platforms * Experience building and maintaining integrations, automations, and engineering workflows using Python or similar scripting language * Experience translating operational requirements into technical solutions with clients or internal stakeholders * Ability to travel ~50% * Limited immigration sponsorship may be available Key requirements * discretionary annual incentive program

Requirements

_ automation and AI to security operations use cases such as triage, workflow orchestration, alert summaries, and response recommendations * Mentor junior practitioners and contribute reusable engineering assets, accelerators, and implementation patterns for client delivery and practice growth Tasks * Bachelor’s degree or equivalent work experience * 10+ years in security operations, detection engineering, security engineering, or enterprise cyber defense * Hands-on design, implementation, and optimization of SIEM, SOAR, telemetry, and response workflows across enterprise platforms * Experience building and maintaining integrations, automations, and engineering workflows using Python or similar scripting language * Experience translating operational requirements into technical solutions with clients or internal stakeholders * Ability to travel ~50% * Limited immigration sponsorship may be available Key requirements * discretionary annual incentive program

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

1:04 min

Introduction to Bitcoin script parsing tools

Steve Shadders · LIVE

5:01 min

Bridging the gap between software development and security

Vandana Verma · LIVE

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

1:53 min

Evaluating traditional scripting languages for modern development tasks

Jens Knipper Jens Knipper · Europe 2026 Virtual

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

Videos

See all

Related articles

See all