Senior Automation Engineer (AI-Accelerated Threat Response)

In this role, you will collaborate with various stakeholders to understand business requirements and strategize the utilization of automation for enhanced efficiency. Working closely with the Security Operations Center (SOC) team, Detection Engineering, and Incident Response Team (IRT), you will assist in the implementation and management of SOAR technologies, ensuring novel AI-accelerated attack techniques are contained and remediated with minimal human latency.

Responsibilities:

Cooperate with the SOC, Detection Engineering, and broader Global Cyber Defense teams to enhance existing automation and deliver robust security solutions capable of matching the speed of AI-accelerated attacks.

Evaluate, design, and upgrade SOC processes and workflows, focusing on integrating automation through SOAR tools and technologies to reduce mean-time-to-contain (MTTC) for novel, AI-driven attack techniques.

Initiate new SOC automation, ensuring compatibility with existing detection and response tools, and rapidly operationalize new automated response actions as Detection Engineering identifies emerging AI-accelerated TTPs.

Integrate new log sources and develop playbooks to efficiently triage and respond to security incidents while minimizing analysis time, prioritizing machine-speed response for incidents suspected of AI-assisted exploitation.

Design custom scripts and evaluate AI/LLM-assisted tooling to automate existing detection and response workflows, increasing the speed and consistency of triage and containment.

Assess SOC alerts statistics and workflows to minimize false positives and accurately direct engineering efforts.

Create pipelines to enrich logs and alert results, providing a comprehensive view for SOC analysts.

Operate and mature a SOC playbook, workflow automations, and use cases, with particular focus on scenarios involving frontier AI-enabled reconnaissance, exploit generation, and attack automation.

Engage with stakeholders to identify business requirements and provide recommendations on leveraging data and automation effectively.

Job Qualifications

Requirements

Comprehensive knowledge of both classic and emerging threat actor tactics, techniques, and procedures, including the growing use of frontier AI/LLM systems for reconnaissance, exploit development, and attack automation.

Proven experience in using Python for automating security operations and incident response processes, including integrating AI/LLM APIs to accelerate triage and enrichment.

Strong understanding of security architecture, tool integration, API development, and automation.

Extensive knowledge of Incident Response processes, with an emphasis on reducing response time for machine-speed, AI-accelerated attacks.

Familiarity with common SOC and SOAR processes and workflows.

Rich background and experience in Security Information and Event Management (SIEM) systems.

Experience with security-related datasets, log formats, and protocols.

Excellent communication and collaboration skills to work effectively with cross-functional teams, particularly Detection Engineering.

Scale your career with P&G

We provide avenues to scale your expertise and technological proficiency.

As an experienced hire, you are empowered to scale your impact and go beyond being a developer with opportunities to lead, guide, and collaborate on transformative projects that power our brands.

We are committed to scale your personal growth alongside the company’s success. Here’s what’s on the table:

Performance bonus (STAR program) that rewards managers in light with business results achieved.

Thrive at work and your personal life through our flexible work schedule with available work from home arrangements.

Your well-being is non-negotiable and supported by health insurance, fitness support, and an Employee Assistance Program.

Learn more about what’s in store for you at https://www.pgcareers.com/ph/en/benefits.

About us

We produce globally recognized brands and we grow the best business leaders in the industry. With a portfolio of trusted brands as diverse as ours, it is paramount our leaders are able to lead with courage the vast array of brands, categories and functions. We serve consumers around the world with one of the strongest portfolios of trusted, quality, leadership brands, including Always®, Ariel®, Gillette®, Head & Shoulders®, Herbal Essences®, Oral-B®, Pampers®, Pantene®, Tampax® and more. Our community includes operations in approximately 70 countries worldwide.

Visit http://www.pg.com to know more.

We are an equal opportunity employer and value diversity at our company. We do not discriminate against individuals on the basis of race, color, gender, age, national origin, religion, sexual orientation, gender identity or expression, marital status, citizenship, disability, HIV/AIDS status, or any other legally protected factor.

Job Schedule

Full time

Job Number

R000155196

Job Segmentation

Experienced Professionals