AI & Automation Engineer

This is a fully remote position, open to applicants in Romania.

📋 Description

• Spearhead the technical design and implementation of AI automation across various SOC workflows and services.

• Oversee complex projects involving diverse security services teams.

• Develop essential components utilizing LLMs, agents, and retrieval pipelines.

• Define reusable architectures for agents, RAG, and tool integrations.

• Establish evaluation methods for AI and set release criteria.

• Design controls focused on least-privilege access, sensitive data handling, prompt injection, output validation, and analyst approval.

• Lead the integration design for SIEM, SOAR, XDR/EDR, threat intelligence, and case management.

• Enhance shared Python components, testing practices, CI/CD processes, observability, and rollback strategies.

• Conduct design reviews and mentor engineers on challenging implementation choices.

• Own the reliability and measurable outcomes across interconnected workflows.

• Shape priorities in collaboration with Security Operations, Threat Research, Data Science, and DevOps teams.

• Coordinate technical dependencies, troubleshoot production issues, and document architecture and operational standards.

⛳️ Requirements

• Over 7 years of experience in building production software.

• More than 2 years of experience with LLMs, agents, or applied machine learning.

• At least 1 year working within or alongside a SOC or security team.

• Profound skills in Python and API engineering.

• Experience in evaluating OpenAI, Anthropic, and open-source models for production readiness.

• Proven ability in leading architecture and delivery across multiple workflows or services.

• Experience in establishing AI evaluation and release criteria.

• Proficient in diagnosing systemic failure modes.

• Strong knowledge of security operations.

• Experienced in designing secure integrations, evidence handling, and ensuring analyst oversight for automated responses.

• Familiar with designing and operating distributed or event-driven cloud services.

• Experience with testing, CI/CD, observability, resilience, and resolving production incidents.

• Ability to convert ambiguous requirements into detailed technical plans.

• Capability to influence decisions across teams and mentor senior engineers while maintaining a hands-on approach.

• Nice to have: Knowledge of SQL, Taegis, Sigma detection rules, or MITRE ATT&CK.

• Nice to have: Familiarity with vector databases, hybrid retrieval, model fine-tuning, or agent orchestration frameworks.

• Nice to have: Experience in incident response, network traffic analysis, or Windows event log analysis.

• Nice to have: Experience with containerized or event-driven services, or contributions to open-source projects in security or ML tooling.

• Must have legal authorization to work in Romania without employer sponsorship.

🏝️ Benefits

• A remote-first working model, prioritizing remote work for the majority of employees.

• Employee-led initiatives for diversity and inclusion.

• Annual charity and fundraising activities.

• Volunteer days available for employees.

• Global sustainability initiatives for employees.

• Global competitions in fitness and trivia.

• Wellbeing days observed globally.

• Monthly webinars and training sessions focused on wellbeing.

• Commitment to equality of opportunity and necessary recruitment adjustments.