SOC CW n Dev Lead

Level

The AI and Automation Lead is responsible for embedding intelligence, efficiency, and scalability into Security Operations Centers (SOCs) by leveraging AI, GenAI, and automation platforms like Microsoft Sentinel, Azure Logic Apps, and Kyndryl Bridge. This role is pivotal in driving transformation, SLA adherence, and operational excellence across global security operations

1. Design and implement AI models for threat detection, behavioural analytics, and anomaly detection using Microsoft Native Tools and Kyndryl Bridge.2. Integrate GenAI into SOC workflows for predictive threat modelling, incident summarization, and automated RCA generation 3. Lead the development of agentic AI systems that support autonomous decision-making and response orchestration4. Architect and maintain automation playbooks in Azure Logic Apps to streamline incident triage, enrichment, and remediation5. Define automation KPIs and track reduction in MTTR, ticket volumes, and manual interventions 6. Collaborate with SOAR developers and content writers to ensure modular, scalable, and reusable automation components 7. Oversee Power BI dashboard development for real-time SOC visibility, SLA tracking, and executive reporting 8. Embed GenAI-powered conversational analytics and predictive insights into dashboards for proactive decision-making 9. Define and monitor automation-linked KPIs such as ticket reduction, RCA turnaround, and SLA compliance 10. Participate in governance forums to align AI/automation initiatives with business objectives and compliance standards11. Ensure responsible AI practices, including fairness, explainability, and human oversight 12. Work with SOC analysts, threat intelligence teams, and platform engineers to align automation with operational needs MS Sentinel and LogicApps

Tool / Technology: