AI & Automation Engineer

AI & Automation EngineerThe Cyber Security Engineering team is seeking a dynamic AI & Automation Engineer to build and support the critical technologies that enable our Information Security and Incident Response teams. Operating in a highly collaborative, hybrid Agile/Scrum environment, you will leverage Python and Golang to develop robust scripting, orchestrate tasks within Cortex XSOAR, and streamline complex security operations. Beyond traditional SOAR engineering, you will play a pivotal role in our AI enablement journey by exploring, securing, and implementing cutting-edge technologies like Retrieval-Augmented Generation (RAG), Agent-to-Agent communications, and the Model Context Protocol (MCP). We are looking for a strong software engineer with a passion for learning emerging AI concepts who can effectively partner with cross-functional teams to automate our defenses and accelerate incident response.Responsibilities:Automation Script Development: Write, maintain, and optimize efficient scripts using Python and Golang to automate routine security and incident response tasks.SOAR Platform Orchestration: Develop and manage playbooks, workflows, and integrations within the Cortex XSOAR platform to accelerate incident resolution.Cross-Functional Collaboration: Partner closely with security analysts and cross-functional stakeholders to gather requirements and deliver impactful solutions.Agile Sprint Participation: Actively engage in daily stand-ups, sprint planning, and retrospectives to ensure continuous delivery within our Agile framework.AI Implementation Support: Assist in designing and implementing emerging AI technologies, including RAG architectures, to enhance security team capabilities.Agent Communication Design: Build and test reliable Agent-to-Agent communication workflows that support intelligent, automated decision-making processes.MCP Integration Support: Assist in the development, integration, and security of the Model Context Protocol (MCP) to standardize our AI interactions.API Integration Management: Connect disparate internal systems and third-party security tools using robust RESTful API integrations.Continuous Technology Learning: Dedicate time to researching and experimenting with the latest advancements in AI and automation to identify new operational efficiencies.Code Testing Review: Conduct peer code reviews and implement automated testing to maintain a high-quality, secure, and reliable codebase.Technical Documentation Creation: Create and maintain comprehensive documentation for developed scripts, playbooks, and AI integrations to ensure team-wide knowledge sharing.QualificationsRequired:Bachelor's degree in Computer Science, Software Engineering, or a closely related field plus 5 years' experience; Or Master's Degree plus 4 years' experience.Respective years of related work experience in software engineering, automation, or integration development.Strong proficiency in programming and scripting languages, specifically Python and Golang.Proven experience developing and consuming RESTful APIs for complex system integrations.Demonstrated capability and enthusiastic interest in learning new technologies, specifically in the AI space (e.g., LLMs, RAG, MCP).Experience working effectively within an Agile/Scrum development methodology.Excellent cross-functional collaboration and communication skills, with the ability to translate operational needs into technical solutions.Solid understanding of software development lifecycles, version control (e.g., Git), and code testing principles.Ability to work successfully in a hybrid work environment.Preferred:Hands-on experience with Cortex XSOAR or similar SOAR platforms (e.g., Splunk SOAR, Tines).Prior exposure to or foundational knowledge of AI frameworks, RAG implementations, or Agent-to-Agent communications.Basic understanding of cybersecurity principles or incident response workflows (prior security experience is not required, but an interest is a plus).Familiarity with CI/CD pipelines and infrastructure-as-code deployments.Experience with containerization technologies like Docker or Kubernetes.Additional InformationThe compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.This job is eligible to participate in our short-term incentive programs.AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.US & Puerto Rico only - to learn more, visit & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more: Fraud AlertAbbVie will never request sensitive personal information (such as bank account details, social security numbers, or payment of any kind) during the recruitment process.If you suspect you have received a fraudulent offer or communication claiming to be from AbbVie, please do not respond, open any attachments, or click on any hyperlinks.If you have any questions or concerns regarding the authenticity of a communication alleged to have been made by or on behalf of AbbVie, please contact us immediately.Protect yourself by verifying job offers and communications. Your safety is important to us.Pay Range: $84500 - 162000 USDWhere We WorkRole is primarily site- or office-based but can occasionally be performed remotely. Employees who are site/office-based and can occasionally perform their role virtually work both in the office and remotely*, following the policies and regulations in place at their location. US Employees must be in the office on Tuesday, Wednesday, and Thursday with flexibility to work remotely on Mondays and Fridays. Three days in the office is the minimum; some individuals or teams may require more in-office days due to meetings, business/project needs or their role.