Cyber Detection and Response AI Operations & Optimization Specialist

Skills & Qualifications
" 3+ years of experience in security engineering, automation engineering, SOC operations, or detection engineering.
" Experience with AI assistants, LLMs, workflow automation, or orchestration platforms.
" Strong understanding of SOC workflows, detection operations, and analyst processes.
" Experience developing operational metrics, dashboards, or performance reporting.
" Familiarity with process controls, workflow governance, and operational monitoring concepts.
" Experience with APIs, scripting, and system integrations.
" Strong analytical, troubleshooting, and problem-solving skills.

Role Summary
Support the optimization, adoption, and operational maturity of AI-enabled SOC workflows through prompt tuning, workflow enhancements, automation improvements, operational controls, and performance measurement. Focus on improving the effectiveness, efficiency, and reliability of AI-assisted detection, investigation, and response capabilities.

Responsibilities
" Optimize AI-assisted investigation, triage, and response workflows.
" Develop and maintain prompts, workflow templates, automation logic, and operational controls.
" Analyze workflow performance and identify opportunities to improve effectiveness, accuracy, and analyst experience.
" Tune confidence thresholds, escalation logic, and decision workflows.
" Support implementation of controls, guardrails, and monitoring mechanisms for AI-enabled processes.
" Develop and track operational metrics, KPIs, and reporting related to workflow performance, adoption, detection quality, and analyst productivity.
" Incorporate analyst feedback into workflow enhancements and continuous improvement efforts.
" Support testing, validation, and rollout of new AI use cases, workflows, and model updates.
" Document optimization recommendations, performance findings, and operational procedures.