Senior AI Developer SOC Automation (L2)

Position: Senior AI Developer SOC Automation (L2)

Grade/Level: Mgr

Reporting to: Lead AI Developer SOC Automation

Employment Type : Employee - Full Time

Experience:

Work Location: Navi Mumbai

4–6 years of software/AI engineering experience, with at least 2 years focused on AI/ML systems.

Key Focus area : SOC Automation

Job Profile:   

As part of the SOC Automation team, the “Senior AI Developer SOC Automation” will build and operate AI-powered components that automate key cybersecurity workflows . Working closely with the AI Lead, he will develop LLM-powered sec bots, ML models and automation scripts and integrate with monitored environments spanning cloud (Azure, GCP, AWS) and on-premises infrastructure . This is a hands-on development and engineering role and will be required to develop code/applications/agents, maintain deployed models, and continuously improve automation coverage based on feedback.

KEY RESPONSIBILITIES :

AI/ML Development

•       Build and maintain AI gents/sec bots for alert classification, anomaly detection, and threat prioritization etc

•       Develop and fine-tune NLP models for log parsing, alert summarization, phishing detection, and IOC extraction

•       Implement feature engineering pipelines that process log data from Azure Sentinel, GCP Security Command Center, Trend Micro XDR, on-prem SIEM sources, and other security monitoring platforms

•       Build and optimize RAG pipelines to give LLMs access to internal threat intelligence and playbook knowledge bases

•       Experiment with, evaluate, and prompt-engineer AI models for SOC-specific use cases

Automation & Integration

•       Develop Azure Functions and Logic Apps to automate alert enrichment, triage routing, and notification workflows

•       Build and maintain SIEM/SOAR integrations — write custom playbook actions and connectors for Sentinel SOAR and Log Rhythm SIEM

•       Integrate AI outputs with ticketing tool for automated incident creation and status updates

•       Consume and normalize event streams from Azure Event Hub, GCP Pub/Sub, TM XDR, and on-prem log forwarders

•       Build Python scripts and API microservices (FastAPI) to expose AI capabilities as internal services

Quality, Monitoring & MLOps

•       Write unit and integration tests for all AI components; participate in code reviews with the AI Lead

•       Monitor deployed model performance and alert on drift using Azure ML monitoring and custom dashboards

•       Maintain CI/CD pipelines for model and automation deployment

•       Document AI components, data schemas, API contracts, and operational runbooks

•       Participate in SOC analyst feedback sessions to collect feedback and continuously improve agents/model accuracy

Competencies /Expertise Required

•       4–6 years of software/AI engineering experience, with at least 2 years focused on AI/ML systems

•       Strong Python skills: comfort with data manipulation (pandas, NumPy) and ML libraries (scikit-learn, PyTorch or TensorFlow)

•       Working knowledge of Microsoft Azure services: Azure ML, Azure Functions, Logic Apps, Sentinel, Event Hub

•       Experience with LLM APIs (e.g. Azure OpenAI, OpenAI) and basic prompt engineering / RAG patterns

•       Familiarity with REST API development using FastAPI or Flask

•       Understanding of cybersecurity basics: log formats, common attack patterns, MITRE ATT&CK, SIEM concepts

•       Experience with version control (Git), CI/CD principles, and containerization (Docker)

Qualification

Required :    

·        BE/BTech in Computer Science and Engineering/Information Technology, or MCA

Preferred :    

·        Experience with Azure Sentinel Analytics Rules, Workbooks, or Playbooks

·        Familiarity with SOAR platforms — Sentinel SOAR, Log Rhythm SIEM

·        Knowledge of GCP services: Security Command Center, Pub/Sub, BigQuery

·        Exposure to LangChain, Semantic Kernel, or similar LLM orchestration frameworks

·        Security certifications : SC-200, AZ-900, CEH, CompTIA Security+

·        Experience with Azure AI Search (Cognitive Search) for vector/hybrid search

·        Familiarity with on-premises SIEM/log aggregation tools

Experience

4–6 years of software/AI engineering experience, with at least 2 years focused on AI/ML systems