Managed Services - TDR POD-AI Security Engineer-Associate-Consult

Responsibilities

• Building and testing AI agents and LLM-powered workflows for security operations use cases
• Assisting with conversational assistants in Microsoft Copilot Studio for analyst and client-facing scenarios
• Supporting development of services backed by relational and NoSQL databases
• Packaging and deploying containerized solutions using Docker and secure container design practices
• Documenting responsible AI controls and supporting model and data risk reviews
• Developing and testing SIEM detections across Microsoft Sentinel, Splunk, and Google SecOps using KQL and SPL
• Contributing to threat detection use cases mapped to NIST and MITRE ATT&CK frameworks
• Helping develop dashboards, alerts, workbooks, and reporting for incident response and cyber operations
• Maintaining and tuning SIEM environments across cloud and hybrid infrastructures
• Onboarding log sources using REST APIs and Python scripts and validating data flow across security tools
• Building and maintaining SOAR playbooks using Logic Apps, Splunk SOAR, and Demisto to automate response actions
• Monitoring security events, supporting incident response, and participating in threat hunting and threat intelligence activities
• Following runbooks and escalating issues to senior team members when needed
• Contributing to technical documentation and proofs of concept that support client delivery
• Adapting to evolving technologies while learning from feedback and delivering quality work on time
• What You Must Have
• At least a Bachelor's degree
• At least 2-4 years of experience
• Oral and written proficiency in English required
• What Sets You Apart
• Preference for at least one of the following fields of study: Business Studies, Computer and Information Science, Information CyberSecurity, Information Technology, Management Information Systems
• At least one of the following: One or more certifications aligned to incident response and cyber defense, including GIAC (eg., GCFA, GCIA, GCIH) or equivalent incident response credentials
• Building SIEM detections using Sentinel, Splunk, or Google SecOps
• Developing AI-enabled security automations with LangChain or Copilot Studio
• Supporting incident response, threat hunting, and log analysis activities
• Applying Python, REST APIs, and Git in security workflows
• Collaborating in client-facing managed services delivery teams