AI Security SOC Engineer - SGI

Job Title: Senior AI Security (SOC) Engineer

Location : Hybrid (3 days in London office)

Who we're looking for

We're looking for a Senior AI Security (SOC) Engineer who thrives on solving complex issues, who builds AI SoC workflows and helps and mentors others, while delivering the best possible technical service.

We want someone who can work well in a team but be self‑motivated. We are looking for someone that can understand complex IT/Security issues and articulate clearly to technical and non‑technical people alike. Someone who is always looking for improvements to our service.

The team

We support our international offices by developing, rolling out and maintaining our systems and processes, using cutting‑edge software and hardware.

What you'll do

We are seeking a Senior AI Security Engineer who will support the Cyber Defence capability. This role will be focused on contributing to the development of an agentic orchestration platform for the SOC (in response to cyber frontier).

You will:

• Build and improve SOC automations and playbooks (triage, enrichment, case handling, response actions).
• Develop AI‑assisted workflows (e.g., summarisation, guided triage, recommended next steps, knowledge lookup over runbooks).
• Develop and secure AI agents and their associated skills, designing robust controls for safe and effective transfer of control.
• Integrate tools and data sources using APIs/webhooks and maintain reliable, observable workflows.
• Partner with SOC/IR to move from prototype to production with auditability, safety controls, and documentation.
• Track outcomes (e.g., time-to-triage/close, automation success rates, alert noise reduction).

What we're looking for

• Strong hands‑on experience in security engineering within/for a SOC, especially automation (SOAR or equivalent).
• Comfortable building integrations and workflows with scripts/code (e.g., Python/PowerShell) and APIs.
• Working knowledge of cloud environments (Azure essential; AWS useful) and common security telemetry.
• Practical experience applying LLMs/AI in operations (or strong interest with evidence of delivery mindset).
• Able to work iteratively with analysts, write clear runbooks, and operate calmly in an incident‑driven environment.
• Someone who uses LLMs to assist with their own development work.

Nice to have

• CI/CD, Github Actions.
• n8n.
• Kubernetes (AKS in particular).
• Terraform.
• Ansible.

General Skills

• Good people skills.
• Good time management.
• Self‑starter.
• Good communication skills.
• Knowledge and experience of using Agile methodologies e.g. SAFe, SCRUM, Kanban.
• Has the ability to translate concepts into reality.
• Understand the importance of metrics and statistics when measuring performance and capacity.
• Excellent command of the English language, both written and spoken.

Personal Attributes

• Positive attitude, capable of remaining positive when under immense pressure.
• A good communicator, and able to work with teams on a journey of globalisation and automation.
• Someone who never accepts the status‑quo.
• Someone who challenges why things are done the way they are.
• Someone who is capable of 'green‑field' thinking. Capable of imaging how the global platform could look, and capable of creating a strategy to get us there.
• Friendly, approachable, enjoys working with people from a variety of backgrounds.
• Work well with others in a collaborative environment.
• Continuous improvement mind‑set, challenges the status quo and seeks self‑improvement.

We believe in equal opportunity for all and actively encourage applications from diverse backgrounds, experiences, and perspectives.