Cyber Detection and Response AI Operations & Optimization Specialist

Skills & Qualifications• 3+ years of experience in security engineering, automation engineering, SOC operations, or detection engineering.• Experience with AI assistants, LLMs, workflow automation, or orchestration platforms.• Strong understanding of SOC workflows, detection operations, and analyst processes.• Experience developing operational metrics, dashboards, or performance reporting.• Familiarity with process controls, workflow governance, and operational monitoring concepts.• Experience with APIs, scripting, and system integrations.• Strong analytical, troubleshooting, and problem-solving skills.Role SummarySupport the optimization, adoption, and operational maturity of AI-enabled SOC workflows through prompt tuning, workflow enhancements, automation improvements, operational controls, and performance measurement. Focus on improving the effectiveness, efficiency, and reliability of AI-assisted detection, investigation, and response capabilities.Responsibilities• Optimize AI-assisted investigation, triage, and response workflows.• Develop and maintain prompts, workflow templates, automation logic, and operational controls.• Analyze workflow performance and identify opportunities to improve effectiveness, accuracy, and analyst experience.• Tune confidence thresholds, escalation logic, and decision workflows.• Support implementation of controls, guardrails, and monitoring mechanisms for AI-enabled processes.• Develop and track operational metrics, KPIs, and reporting related to workflow performance, adoption, detection quality, and analyst productivity.• Incorporate analyst feedback into workflow enhancements and continuous improvement efforts.• Support testing, validation, and rollout of new AI use cases, workflows, and model updates.• Document optimization recommendations, performance findings, and operational procedures.

Government Careers

Show more