Senior Cybersecurity Engineer – Agentic AI & SOC Engineering

About the role

EY is seeking a Senior Cybersecurity Engineer to design and deliver next‑generation Security Operations Center (SOC) solutions that combine SIEM, XDR, SOAR and AI/LLM‑driven automation. The role blends hands‑on engineering with client‑facing delivery, focusing on agent‑based AI systems that improve threat detection, investigation and response.

Key responsibilities

• Design and implement agentic AI‑driven SOC architectures integrated with SIEM, XDR and SOAR platforms.
• Develop AI use cases for alert triage, incident summarisation, automated response and playbook orchestration.
• Build and optimise detection use cases using rule‑based and AI‑assisted techniques.
• Integrate large language model capabilities into SOC workflows for analysis, correlation and remediation.
• Support deployment, migration and tuning of SIEM/XDR environments across client landscapes.
• Operationalise threat intelligence feeds into detection pipelines and reduce noise through automation.
• Create architecture diagrams, technical documentation and client‑focused playbooks.

Required profile

• 4–7 years of experience in cybersecurity, SOC engineering or detection & response.
• Strong knowledge of MITRE ATT&CK, incident response lifecycle and security automation.
• Excellent problem‑solving abilities and client communication skills.

Required skills

• Microsoft Sentinel, Defender XDR, CrowdStrike, Splunk
• SIEM, SOAR, XDR/EDR platforms
• AI/ML, LLM, prompt engineering, automation (playbooks, APIs, scripting)
• Agentic AI frameworks such as LangChain, Semantic Kernel, AutoGen
• Azure AI, OpenAI platforms, RAG, embeddings, semantic search
• Cloud security, DevSecOps

What we offer

• Opportunity to work on advanced AI‑driven SOC transformations for global clients.
• Exposure to complex enterprise cybersecurity challenges.
• Collaborative environment with access to EY’s global resources and innovation platforms.