Lead Engineer, Cyber Security Counter Threat Management

We are looking for a seasoned Lead Engineer, Cyber Security Counter Threat Management with a strong technical focus to architect, build, and operate AI-driven automation solutions that enhance our security defense capabilities. You will work at the intersection of AI/ML, security engineering, and DevSecOps to reduce manual work, accelerate threat response, and strengthen our security posture at enterprise scale., * Architect and deploy AI-powered automation workflows for security use cases including threat detection, incident response, vulnerability triage, and compliance monitoring

• Build and maintain production-grade AI agents and orchestration pipelines that integrate deeply with security tooling (SIEM, EDR, SOAR, firewalls, identity platforms)
• Lead development of LLM-based solutions for log analysis, alert enrichment, and natural language querying of security data
• Own end-to-end integrations with platforms such as CrowdStrike, Splunk, ServiceNow, and cloud security services
• Act as a technical SME for SOC analysts and incident responders - identifying high-value automation opportunities, owning delivery, and measuring impact on MTTR
• Define and enforce standards for AI automation security: least privilege, secrets management, audit logging, and prompt injection controls
• Evaluate emerging AI models, agentic frameworks, and cybersecurity tooling - translating them into actionable capability roadmap items
• Mentor junior engineers and provide technical guidance across cross-functional security and engineering teams

• 6+ years in software, cybersecurity and/or automation engineering; 2+ years working hands-on with AI/LLM systems in production
• Expert-level proficiency in Python and/or Node.js for building scalable integrations and automation
• Proven experience designing with LLM APIs (Anthropic, OpenAI, AWS Bedrock) and agentic frameworks (LangChain, Mastra, CrewAI, or similar) in enterprise environments
• Deep hands-on experience with security platforms (SIEM/SOAR, EDR, firewalls, ticketing) and their APIs
• Strong understanding of REST APIs, MCP servers, event-driven architectures, and message queuing
• Solid grasp of core security domains: MITRE ATT&CK, threat intelligence, IAM, vulnerability management, and incident response lifecycle
• Security certifications (CySA+, CISSP, AWS Security Specialty, OSCP)
• Experience securing AI/LLM systems against prompt injection, model abuse, and data leakage
• Familiarity with Splunk SPL, KQL, or similar query languages at scale
• Background in red team, threat hunting, or detection engineering
• Prior experience in a SOC, MSSP, or enterprise security operations environment

Journey with us! Combine your career goals and sense of adventure by joining our exciting team of employees. Royal Caribbean Group is pleased to offer a competitive compensation and benefits package, and excellent career development opportunities, each offering unique ways to explore the world.

We are proud to be the vacation-industry leader with global brands - including Royal Caribbean International, Celebrity Cruises and Silversea Cruises - the most innovative fleet and private destinations, and the best people. Together, we are dedicated to turning the vacation of a lifetime into a lifetime of vacations for our guests.