Role description

AI Incident Management

Cyber Detection and Response AI Operations amp Optimization Specialist

Phoenix, AZ (Onsite)

Role Summary

Support the optimization adoption and operational maturity of AI enabled SOC workflows through prompt tuning workflow enhancements automation improvements operational controls and performance measurement.

Focus on improving the effectiveness efficiency and reliability of AI assisted detection investigation and response capabilities.

Responsibilities

Optimize AI assisted investigation triage and response workflows

Develop and maintain prompts workflow templates automation logic and operational controls Analyze workflow performance and identify opportunities to improve effectiveness accuracy and analyst experience.

Tune confidence thresholds escalation logic and decision workflows Support implementation of controls guardrails and monitoring mechanisms for AI enabled processes.

Develop and track operational metrics KPIs and reporting related to workflow performance adoption detection quality and analyst productivity.

Incorporate analyst feedback into workflow enhancements and continuous improvement efforts.

Support testing validation and rollout of new AI use cases workflows and model updates.

Document optimization recommendations performance findings and operational procedures.

Skills amp Qualifications

3 years of experience in security engineering automation engineering SOC operations or detection engineering.

Experience with AI assistants LLMs workflow automation or orchestration platforms.

Strong understanding of SOC workflows detection operations and analyst

processes.

Experience developing operational metrics dashboards or performance reporting.

Familiarity with process controls workflow governance and operational monitoring concepts.

Experience with APIs scripting and system integrations.

Strong analytical troubleshooting and problemsolving skills.