AI SOC Solutions Architect - Professional Services

What you'll do

• Build AI agents and workflows to triage, investigate, and respond to security alerts; translate customer runbooks into automation.
• Own technical delivery for strategic accounts and integrate customer security tools using REST APIs.
• Tune and evaluate agent behavior, establish guardrails and human checkpoints, and advise customers on adoption.

What they ask for

• 4–6+ years in a technical security role, such as SOC analysis, detection/automation engineering, incident response, or cybersecurity Professional Services/Solutions Architecture.
• Hands-on understanding of SOC alert triage, investigation, escalation, and incident response; experience with at least one SIEM and one EDR/XDR.
• Proficiency in at least one of Python, Bash, or Go, plus REST APIs, JSON, and webhooks.
• Practical experience using LLMs and agentic AI, including prompt engineering, evaluating agent behavior, and managing failure modes.

Nice to have

• SOAR platform experience, especially legacy-platform migrations.
• Detection engineering/query languages or agentic AI infrastructure such as MCP, tool/function calling, RAG, or vector stores.

Tools

Sentinel, Splunk, Chronicle, CrowdStrike, Defender, SentinelOne, Python, Bash

AI focus

Build, tune, and evaluate agentic AI for SOC triage, investigation, and response, using prompt engineering, guardrails, and human-in-the-loop checkpoints.