Requirement Details: Senior AI & Automation Engineer – Cyber Security & Security Operations Primary

Location:
Hybrid / Remote Position Overview (Job Summary): The Senior AI & Automation Engineer will drive automation and AI transformation across Cyber Security operations. The role focuses on security automation, SOC orchestration, AI-driven threat detection and response, vulnerability remediation, compliance automation, and self-healing security controls. The engineer will work primarily with Microsoft Sentinel, Microsoft Defender, Microsoft Entra ID, Microsoft Purview, Microsoft Security Copilot, ServiceNow SecOps, Red Hat Ansible Automation Platform, PowerShell, and Python. Primary

Skills:
• Microsoft Sentinel
• Microsoft Defender XDR
• Microsoft Defender for Endpoint / Identity / Cloud
• SIEM / SOAR
• Security Automation & Orchestration
• ServiceNow SecOps
• Red Hat Ansible Automation Platform
• PowerShell
• Python
• REST APIs
• Microsoft Entra ID
• Security Incident Response
• Vulnerability Management Secondary

Skills:
• Microsoft Security Copilot
• Copilot Studio
• Microsoft Purview
• Identity Governance / PIM / Conditional Access
• Azure Automation
• Git
• JSON / YAML
• Infrastructure-as-Code / Security-as-Code
• CI/CD Security Integration / DevSecOps
• Threat Intelligence
• Privileged Access Management
• GRC / CMDB
• Compliance frameworks: ISO 27001, NIST, CIS Controls, SOC 2
• Secrets and Certificate Management

Experience:
• 5+ years of experience in Cyber Security, Security Engineering, Security Operations, or Security Automation.
• Experience working in enterprise-scale security environments.




• Hands-on experience developing automation and orchestration workflows.
• Experience integrating Microsoft Security technologies with ServiceNow.
• Experience developing scripts, playbooks, APIs, and security automation solutions. Role and

Responsibilities:
A.

Key Responsibilities
• Design, develop, and maintain enterprise security automation solutions and reusable playbooks.
• Automate SOC incident triage, alert enrichment, threat intelligence, malware/phishing investigation, endpoint response, and remediation.
• Develop automation using Microsoft Sentinel SOAR, Defender, PowerShell, Python, Ansible, and REST APIs.
• Build AI-driven security solutions using Microsoft Security Copilot and Copilot Studio.
• Develop and optimize ServiceNow SecOps workflows for Security Incident Response and Vulnerability Response.
• Integrate ServiceNow with Sentinel, Defender, vulnerability scanners, CMDB, identity systems, and SIEM/SOAR platforms.
• Develop Ansible automation for server hardening, vulnerability remediation, patching, configuration compliance, and certificate lifecycle management.
• Automate vulnerability scanning, compliance monitoring, configuration drift detection, and audit evidence collection.
• Support Security-as-Code, Infrastructure-as-Code, DevSecOps, CI/CD security integrations, and automated security controls.




• Reduce MTTD and MTTR through automation and AI-assisted security operations. B. Additional Responsibilities
• Identify repetitive security activities suitable for automation.
• Standardize security automation across global environments.
• Improve analyst productivity and reduce manual intervention.
• Reduce false positives and improve investigation consistency.
• Develop security knowledge assistants and security operations chatbots.
• Support proactive threat hunting and AI-assisted threat correlation.
• Maintain Ansible playbooks, automation repositories, configuration standards, and compliance frameworks.
• Automate privileged access reviews and identity lifecycle activities.
• Support DLP, information protection, data classification, and compliance automation.
• Implement security guardrails, automated approvals, policy enforcement, and compliance monitoring.
• Improve audit readiness, security operational efficiency, cyber resilience, and automation coverage. Educational Qualification:
• Bachelor's degree in:
• Cyber Security
• Computer Science
• Engineering
• Information Technology
• Or equivalent skilled experience Certifications: Microsoft:
• Microsoft Certified: Cybersecurity Architect Expert
• Microsoft Certified: Security Operations Analyst
• Microsoft Certified: Identity and Access Administrator Cyber Security:
• CISSP
• CISM
• GIAC Certifications
• CompTIA Security+ Automation:
• Red Hat Certified Specialist in Ansible Automation
• Microsoft Power Platform Certifications ServiceNow:
• ServiceNow Certified System Administrator
• ServiceNow Security Operations Specialist

📌 Senior AI (Noida)
🏢 HCLTech
📍 Noida