IL
AI Security Operations (SOC) Automation Specialist
ICONMA, LLC
🇺🇸 United States
On-site
2 months ago
- AI
- triage
- Large Language Models
- Incident Response
- SIEM
- EDR
- Risk Management
2 months ago
Our client, a IT Services and Consulting company, is looking for a AI Security Operations (SOC) Automation Specialist for their Phoenix, AZ/Hybrid location.
Â
Responsibilities:
- Support the optimization, adoption, and operational maturity of AI-enabled SOC workflows through prompt tuning, workflow enhancements, automation improvements, operational controls, and performance measurement.
- Focus on improving the effectiveness, efficiency, and reliability of AI-assisted detection, investigation, and response capabilities.
- Optimize AI-assisted investigation, triage, and response workflows.
- Develop and maintain prompts, workflow templates, automation logic, and operational controls.
- Analyze workflow performance and identify opportunities to improve effectiveness, accuracy, and analyst experience.
- Tune confidence thresholds, escalation logic, and decision workflows.
- Support implementation of controls, guardrails, and monitoring mechanisms for AI-enabled processes.
- Develop and track operational metrics, KPIs, and reporting related to workflow performance, adoption, detection quality, and analyst productivity.
- Incorporate analyst feedback into workflow enhancements and continuous improvement initiatives.
- Support testing, validation, and rollout of new AI use cases, workflows, and model updates.
- Document optimization recommendations, performance findings, and operational procedures.
Requirements:
- 3+ years of experience in security engineering, automation engineering, SOC operations, or detection engineering.
- Experience with AI assistants, Large Language Models (LLMs), workflow automation, or orchestration platforms.
- Strong understanding of SOC workflows, detection operations, and analyst processes.
- Experience developing operational metrics, dashboards, and performance reporting.
- Familiarity with process controls, workflow governance, and operational monitoring concepts.
- Experience with APIs, scripting, and system integrations.
- Strong analytical, troubleshooting, and problem-solving skills.
- Preferred Qualifications:
- Experience optimizing AI-enabled security operations and incident response workflows.
- Knowledge of prompt engineering, AI model tuning, and workflow automation best practices.
- Experience with SOAR, SIEM, EDR, and security orchestration platforms.
- Familiarity with operational risk management, governance frameworks, and security process improvement.
- Experience driving continuous improvement initiatives through data-driven insights and automation.
- Years of Experience:Â Â 10.00 Years of Experience
Why Should You Apply?
- Health Benefits
- Referral Program
- Excellent growth and advancement opportunities
AI Security Operations (SOC) Automation Specialist · ICONMA, LLC