Advance your career with EY by joining our Frontier AI Layered Defense Detection and Response team. This role offers a unique opportunity to build next-generation Security Operations Center (SOC) solutions, integrating advanced AI and Large Language Models (LLMs) with SIEM, XDR, and SOAR platforms. You will be instrumental in designing agent-based AI systems to significantly enhance threat detection, automate complex investigations, and orchestrate effective response actions, contributing to both hands-on engineering and client delivery.

Key responsibilities include designing and implementing agentic AI-driven SOC architectures, developing AI use cases for alert triage and incident summarization, and building optimized detection use cases using AI-assisted approaches. You will integrate LLM capabilities into SOC workflows for analysis and correlation, support platform deployments and tuning, and improve SOC efficiency through automation and noise reduction. This role also involves operationalizing threat intelligence, collaborating with clients on solution design, and creating comprehensive technical documentation. You will play a vital part in building our AI-driven SOC capabilities.

Ideal candidates possess 4–7 years of experience in Cybersecurity, SOC Engineering, or Detection & Response. Essential qualifications include proficiency with platforms like Microsoft Sentinel, Defender XDR, CrowdStrike, or Splunk, along with a strong grasp of SIEM, SOAR, XDR/EDR, and detection engineering principles. Familiarity with AI/ML or LLM use cases in SOC environments is crucial, as is experience with automation through playbooks, APIs, and scripting. A foundational understanding of prompt engineering, AI-assisted workflows, MITRE ATT&CK, and the incident response lifecycle is expected, coupled with excellent problem-solving and client communication abilities.