Detection & Response Automation Engineer

Title: Senior Consultant - Detection & Response Automation Engineer
Location: Bangalore/ Hyderabad/ Chennai/ Pune/ Mumbai
Shift: Morning shift
Skills: Splunk SOAR

POSITION DESCRIPTION

The Detection and Response Automation Engineer is part of CGIs Global Security Operations Center (GSOC) which provides 24/7 security monitoring threat detection and incident response capabilities across the Detection and Response Automation Engineer will be responsible for delivering security automation solutions that enable security operations teams to rapidly respond to an ever changing threat landscape. This person will support CGI Corporate Services teams in their automation efforts to help us better protect corporate technology platforms.

The person will be primarily responsible for the integration efforts of the Security Orchestration Automation and Response (SOAR) platform with various enterprise security services. You will also work with other members in the security team to increase automation of manual process through the development of security automation playbooks deployed on the SOAR platform.

POSITION RESPONSIBILITIES

AI Automation Responsibilities

. Design develop and maintain AI powered tools that enhance security monitoring detection engineering incident response and threat hunting activities.
. Build intelligent assistants AI agents copilots and automation workflows using Large Language Models (LLMs) Generative AI and modern agentic AI frameworks.
. Develop AI solutions that automate alert triage investigation workflows evidence collection reporting and knowledge retrieval.
. Collaborate with Security Monitoring Incident Response Detection Engineering Threat Intelligence and Security Engineering teams to identify opportunities for AI driven improvements.


Security Automation Playbook Management

. Document and maintain all technical aspects of the orchestration and automation playbooks
. Collaborate with Global Security Shared Services (GSSS) and Global Security Operations Center (GSOC) teams in providing the advanced threat knowledge and directions which are implemented by the automation specialist
. Maintain the playbook life cycle in the various environments (development testing production) using version control continuous integration (CI) and continuous deployment (CD)


Security Orchestration Automation and Response Platform Support

. Act as the Subject Matter Expert (SME) responsible for the evolution of the SOAR platform
. Perform reviews of the platforms new features and provides feedback on innovation that could be integrated
. Collaborate with the service providers delivering the platform hosting infrastructure platform support and orchestration component configuration to ensure that production and deployment instances are synchronized












QUALIFICATIONS TO BE SUCCESSFUL IN THIS ROLE




Experience


. Knowledge of Large Language Models (LLMs) Generative AI prompt engineering and AI application development.
. Experience developing AI applications using frameworks such as LangChain Semantic Kernel AutoGen OpenAI SDKs Microsoft AI Foundry or similar technologies including experience building AI assistants or agentic workflows.
. Experience with Security Orchestration Automation and Response (SOAR) platforms Palo Alto Cortex Demisto Fortinet FortiSOAR Splunk Phantom Splunk SOAR or other SOAR equivalents platforms
. Experience with security operations (e.g. security analyst security application engineer security application support security content engineer)
. Knowledge of delivering security monitoring detection and response within a global organization
. Knowledge of security operations and secure application development
. Experience interacting with web APIs such as REST GraphQL or SOAP
. Experience with modern software development workflows using tools such as Git Gitlab GitHub Jira or other equivalents.


Qualifications & Certifications


. Bachelors degree in Computer Science Artificial Intelligence Cyber Security Software Engineering Information Technology or a related discipline or equivalent practical experience.
. Relevant industry certifications are desirable including one or more of:
. Microsoft AI 102: Azure AI Engineer Associate
. Microsoft AI 900: Azure AI Fundamentals
. CompTIA Security
. CISSP
. AWS Certified AI Practitioner
. Google Cloud Professional Machine Learning Engineer:
. IBM AI Engineering Professional Certificate

• CompTIA Security
• Artificial Intelligence
• Large Language Model (LLM)
• Palo Alto
• Security Infrastr Service Ctr
• Security Operations Center

Together as owners lets turn meaningful insights into action.

Life at CGI is rooted in ownership teamwork respect and belonging. Here youll reach your full potential because

You are invited to be an owner from day 1 as we work together to bring our Dream to life. Thats why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our companys strategy and direction.

Your work creates value. Youll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas embrace new opportunities and benefit from expansive industry and technology expertise.

Youll shape your career by joining a company built to grow and last. Youll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

That same commitment to fairness extends to how we use technology. To support our recruitment team AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

Come join our teamone of the largest IT and business consulting services firms in the world.