Cybersecurity Engineer - AI Automation

Job description

Join StrangeBee to shape the future of AI applied to incident response.

As a Cybersecurity Engineer - AI Automation, you will operate at the intersection of operational cybersecurity and artificial intelligence:

• Design AI agents that assist SOC analysts
• Ensure their reliability and robustness
• Contribute to the AI product vision within TheHive

You will leverage your understanding of analyst workflows to build solutions addressing real operational needs.

Responsibilities

• Develop and maintain AI agents used to automate:
  • Incident triage
  • Observable enrichment
  • Report generation
• Design automated investigation workflows based on SOC processes
• Contribute to integrations connecting LLMs with TheHive and Cortex

Evaluation & Quality

• Own the AI agent testing framework:
  • Evaluation scenarios
  • Assertions
  • Performance measurement
• Build realistic datasets and testing environments
• Improve reliability (success rate, response quality, regression detection)

AI Agent Security

• Protect agents against:
  • Prompt injection
  • Data leakage
  • Behavioral manipulation
• Design adversarial tests to assess robustness

AI Product Vision

• Identify high‑value use cases
• Propose new features
• Challenge technical and product decisions
• Represent field needs based on SOC workflows

Success criteria (6–12 months)

• Agents are used in production and cover key use cases
• Evaluation framework provides reliable metrics
• Attack vectors are identified and documented
• Active contribution to AI product decisions

Requirements

Must‑have

• At least 5 years of operational cybersecurity experience (SOC, incident response, threat analysis)
• Strong Python skills (production‑level code)
• Understanding of LLMs and prompt engineering

Nice‑to‑have

• Experience with TheHive, Cortex, or SOAR platforms
• Basic Go knowledge
• Docker / CI/CD
• MCP (Model Context Protocol)
• AI security awareness
• Model evaluation tools (e.g. promptfoo)

Soft Skills

• Curiosity and continuous learning
• Autonomy
• Clear communication
• Product mindset