Cyber Detection and Response AI Operations & Optimization Specialist

Skills & Qualifications
• 3+ years of experience in security engineering, automation engineering, SOC operations, or detection engineering.
• Experience with AI assistants, LLMs, workflow automation, or orchestration platforms.
• Strong understanding of SOC workflows, detection operations, and analyst processes.
• Experience developing operational metrics, dashboards, or performance reporting.
• Familiarity with process controls, workflow governance, and operational monitoring concepts.
• Experience with APIs, scripting, and system integrations.
• Strong analytical, troubleshooting, and problem-solving skills.

Role Summary
Support the optimization, adoption, and operational maturity of AI-enabled SOC workflows through prompt tuning, workflow enhancements, automation improvements, operational controls, and performance measurement. Focus on improving the effectiveness, efficiency, and reliability of AI-assisted detection, investigation, and response capabilities.

Responsibilities
• Optimize AI-assisted investigation, triage, and response workflows.
• Develop and maintain prompts, workflow templates, automation logic, and operational controls.
• Analyze workflow performance and identify opportunities to improve effectiveness, accuracy, and analyst experience.
• Tune confidence thresholds, escalation logic, and decision workflows.
• Support implementation of controls, guardrails, and monitoring mechanisms for AI-enabled processes.
• Develop and track operational metrics, KPIs, and reporting related to workflow performance, adoption, detection quality, and analyst productivity.
• Incorporate analyst feedback into workflow enhancements and continuous improvement efforts.
• Support testing, validation, and rollout of new AI use cases, workflows, and model updates.
• Document optimization recommendations, performance findings, and operational procedures.