Detection & Response Automation Engineer

Title: Senior Consultant - Detection Response Automation Engineer
Location: Bangalore/ Hyderabad/ Chennai/ Pune/ Mumbai
Shift: Morning shift
Skills: Splunk SOAR

POSITION DESCRIPTION;

The Detection and Response Automation Engineer is part of CGI's Global Security Operations Center (GSOC), which provides 24/7 security monitoring, threat detection, and incident response capabilities across the organisation.The Detection and Response Automation Engineer will be responsible for delivering security automation solutions that enable security operations teams to rapidly respond to an ever changing threat landscape. This person will support CGI Corporate Services teams in their automation efforts to help us better protect corporate technology platforms.
;
The person will be primarily responsible for the integration efforts of the Security Orchestration, Automation and Response (SOAR) platform with various enterprise security services. You will also work with other members in the security team to increase automation of manual process through the development of security automation playbooks deployed on the SOAR platform.

POSITION RESPONSIBILITIES

AI Automation Responsibilities

. Design, develop, and maintain AI powered tools that enhance security monitoring, detection engineering, incident response, and threat hunting activities.
. Build intelligent assistants, AI agents, copilots, and automation workflows using Large Language Models (LLMs), Generative AI, and modern agentic AI frameworks.
. Develop AI solutions that automate alert triage, investigation workflows, evidence collection, reporting, and knowledge retrieval.
. Collaborate with Security Monitoring, Incident Response, Detection Engineering, Threat Intelligence, and Security Engineering teams to identify opportunities for AI driven improvements.

;
Security Automation Playbook Management

. Document and maintain all technical aspects of the orchestration and automation playbooks
. Collaborate with Global Security Shared Services (GSSS) and Global Security Operations Center (GSOC) teams in providing the advanced threat knowledge and directions which are implemented by the automation specialist
. Maintain the playbook life cycle in the various environments (development, testing, production) using version control, continuous integration (CI) and continuous deployment (CD)

;
Security Orchestration, Automation and Response Platform Support

. Act as the Subject Matter Expert (SME) responsible for the evolution of the SOAR platform
. Perform reviews of the platform's new features and provides feedback on innovation that could be integrated
. Collaborate with the service providers delivering the platform hosting, infrastructure platform support and orchestration component configuration to ensure that production and deployment instances are synchronized

;

;

QUALIFICATIONS TO BE SUCCESSFUL IN THIS ROLE;

;
Experience
;

. Knowledge of Large Language Models (LLMs), Generative AI, prompt engineering, and AI application development.
. Experience developing AI applications using frameworks such as LangChain, Semantic Kernel, AutoGen, OpenAI SDKs, Microsoft AI Foundry, or similar technologies, including experience building AI assistants or agentic workflows.
. Experience with Security Orchestration, Automation and Response (SOAR) platforms Palo Alto Cortex Demisto, Fortinet FortiSOAR, Splunk Phantom, Splunk SOAR or other SOAR equivalents platforms
. Experience with security operations (e.g. security analyst, security application engineer, security application support, security content engineer)
. Knowledge of delivering security monitoring detection and response within a global organization
. Knowledge of security operations and secure application development
. Experience interacting with web APIs such as REST, GraphQL or SOAP
. Experience with modern software development workflows using tools such as Git, Gitlab, GitHub, Jira, or other equivalents.

;
Qualifications Certifications
;

. Bachelor's degree in Computer Science, Artificial Intelligence, Cyber Security, Software Engineering, Information Technology, or a related discipline, or equivalent practical experience.
. Relevant industry certifications are desirable, including one or more of:
. Microsoft AI 102: Azure AI Engineer Associate
. Microsoft AI 900: Azure AI Fundamentals
. CompTIA Security+
. CISSP
. AWS Certified AI Practitioner
. Google Cloud Professional Machine Learning Engineer:
. IBM AI Engineering Professional Certificate

;

Skills:

• CompTIA Security+
• Artificial Intelligence
• Large Language Model (LLM)
• Palo Alto
• Security Infrastr Service Ctr
• Security Operations Center

What you can expect from us: