AI Security Engineer (SOC Automation & Agentic AI)

This is a long term contract and hybrid to downtown Chicago. Responsibilities Identify, design, and prototype AI agent use cases to address SOC operational gaps (alert triage, threat severity assessment, incident enrichment, etc.) Develop and test agent workflows that improve MTTR (Mean Time to Respond) and reduce alert fatigue Create guardrails and validation logic to ensure agent accuracy and security compliance Document use case specifications, success metrics, and operational handoff procedures Architect and build out the AI SOC environment using AIRE as the foundational platform Integrate AIRE with existing SOC tools (SIEM, threat intelligence, ticketing systems, etc.) Configure agents for multi-step incident response workflows Establish feedback loops and continuous improvement mechanisms Define technical requirements and resource specifications needed for agent deployment Configure compute, storage, and networking resources in your own cloud environment Ensure scalability and cost optimization of AI agent operations Manage agent performance monitoring and logging infrastructure Qualifications Security Operations Center (SOC) experience with deep understanding of incident response workflows AI/ML agent frameworks and prompt engineering Integration experience with security platforms (SIEM, EDR, threat intel feeds) Infrastructure/DevOps skills (cloud platforms, containerization, API integrations) Python or scripting experience for workflow automation Building Agentic Workflows, AWS, Splunk SIEM/SOAR/UEBA, CrowdStrike #J-18808-Ljbffr The Judge Group