Security Copilot Agent Development Lead

Security Copilot Agent Developer

Key Responsibilities

• Design & Development:

  Architect and optimize Security Copilot agents for automated investigation, incident response, and tailored cybersecurity scenarios.

• Integration:

  Seamlessly integrate Copilot workflows with

  Defender XDR

  ,

  Sentinel

  ,

  Entra ID

  , and other Microsoft security solutions.

• Data Engineering:

  Prepare, fine-tune, and ground datasets and prompts to support contextualized Copilot responses.

• Automation:

  Develop connectors, scripts, and playbooks using

  Python

  ,

  PowerShell

  , or

  Logic Apps

  to enhance SecOps efficiency.

• Security Intelligence:

  Incorporate

  threat intelligence feeds

  ,

  MITRE ATT&CK mappings

  , and

  risk scoring models

  into agent logic.

• Testing & Validation:

  Conduct functional, performance, and security testing to ensure robust and consistent agent performance.

• Collaboration:

  Partner with

  SOC

  ,

  SecOps

  , and

  AI platform teams

  to identify automation opportunities and continuously improve AI-driven security operations.

• Documentation:

  Create reusable

  playbooks, implementation guides, and best practices

  for Copilot agent development and deployment.

Required Qualifications

• Bachelors or Masters degree in

  Computer Science, Cybersecurity, or related discipline

  .

• 5+ years

  of experience in

  Cybersecurity Engineering

  ,

  SOC Automation

  , or

  Security Operations Development

  .
• Proven hands-on experience with

  Microsoft Security Copilot

  ,

  Sentinel

  , or

  Defender suite

  .
• Strong proficiency in

  Python, PowerShell, or C#

  scripting.
• Deep understanding of

  SOC workflows

  ,

  incident response

  , and

  threat modeling methodologies

  .
• Familiarity with

  LLM-based AI

  ,

  prompt engineering

  , and

  Azure OpenAI integration

  .

Preferred Skills

• Experience developing

  Copilot plugins

  ,

  Graph API connectors

  , or custom extensions.
• Knowledge of

  NIST

  ,

  MITRE ATT&CK

  , and

  Zero Trust Architecture

  frameworks.

• Microsoft or Azure Certifications

  such as

  SC-200

  ,

  SC-100

  ,

  AZ-500

  , or

  AI-102

  are highly desirable.