C
Detection & Response Automation Engineer
Accepting applicationsCGI · Bengaluru, Karnataka, India
Full-Time Entry AIMachine Learning
Estimated market salary
₹6-11 LPA
This is a SiliconBoard market estimate, not an employer-posted salary.
Posted
3d ago
Category
Manufacturing
Experience
Entry
Country
India
Position Description
Title: Senior Consultant - Detection & Response Automation Engineer
Location: Bangalore/ Hyderabad/ Chennai/ Pune/ Mumbai
Shift: Morning shift
Skills: Splunk SOAR
Position Description
The Detection and Response Automation Engineer is part of CGI's Global Security Operations Center (GSOC), which provides 24/7 security monitoring, threat detection, and incident response capabilities across the organisation.The Detection and Response Automation Engineer will be responsible for delivering security automation solutions that enable security operations teams to rapidly respond to an ever changing threat landscape. This person will support CGI Corporate Services teams in their automation efforts to help us better protect corporate technology platforms.
The person will be primarily responsible for the integration efforts of the Security Orchestration, Automation and Response (SOAR) platform with various enterprise security services. You will also work with other members in the security team to increase automation of manual process through the development of security automation playbooks deployed on the SOAR platform.
Position Responsibilities
AI Automation Responsibilities
Design, develop, and maintain AI powered tools that enhance security monitoring, detection engineering, incident response, and threat hunting activities.
Build intelligent assistants, AI agents, copilots, and automation workflows using Large Language Models (LLMs), Generative AI, and modern agentic AI frameworks.
Develop AI solutions that automate alert triage, investigation workflows, evidence collection, reporting, and knowledge retrieval.
Collaborate with Security Monitoring, Incident Response, Detection Engineering, Threat Intelligence, and Security Engineering teams to identify opportunities for AI driven improvements.
Security Automation Playbook Management
Document and maintain all technical aspects of the orchestration and automation playbooks
Collaborate with Global Security Shared Services (GSSS) and Global Security Operations Center (GSOC) teams in providing the advanced threat knowledge and directions which are implemented by the automation specialist
Maintain the playbook life cycle in the various environments (development, testing, production) using version control, continuous integration (CI) and continuous deployment (CD)
Security Orchestration, Automation and Response Platform Support
Act as the Subject Matter Expert (SME) responsible for the evolution of the SOAR platform
Perform reviews of the platform's new features and provides feedback on innovation that could be integrated
Collaborate with the service providers delivering the platform hosting, infrastructure platform support and orchestration component configuration to ensure that production and deployment instances are synchronized
Experience
QUALIFICATIONS TO BE SUCCESSFUL IN THIS ROLE
Knowledge of Large Language Models (LLMs), Generative AI, prompt engineering, and AI application development.
Experience developing AI applications using frameworks such as LangChain, Semantic Kernel, AutoGen, OpenAI SDKs, Microsoft AI Foundry, or similar technologies, including experience building AI assistants or agentic workflows.
Experience with Security Orchestration, Automation and Response (SOAR) platforms Palo Alto Cortex Demisto, Fortinet FortiSOAR, Splunk Phantom, Splunk SOAR or other SOAR equivalents platforms
Experience with security operations (e.g. security analyst, security application engineer, security application support, security content engineer)
Knowledge of delivering security monitoring detection and response within a global organization
Knowledge of security operations and secure application development
Experience interacting with web APIs such as REST, GraphQL or SOAP
Experience with modern software development workflows using tools such as Git, Gitlab, GitHub, Jira, or other equivalents.
Qualifications & Certifications
Bachelor's degree in Computer Science, Artificial Intelligence, Cyber Security, Software Engineering, Information Technology, or a related discipline, or equivalent practical experience.
Relevant industry certifications are desirable, including one or more of:
Microsoft AI 102: Azure AI Engineer Associate
Microsoft AI 900: Azure AI Fundamentals
CompTIA Security+
CISSP
AWS Certified AI Practitioner
Google Cloud Professional Machine Learning Engineer:
IBM AI Engineering Professional Certificate
Your future duties and responsibilities
Required Qualifications To Be Successful In This Role
Together, as owners, let’s turn meaningful insights into action.
Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…
You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.
Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.
You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.
That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.
Come join our team—one of the largest IT and business consulting services firms in the world.
Show more Show less
Title: Senior Consultant - Detection & Response Automation Engineer
Location: Bangalore/ Hyderabad/ Chennai/ Pune/ Mumbai
Shift: Morning shift
Skills: Splunk SOAR
Position Description
The Detection and Response Automation Engineer is part of CGI's Global Security Operations Center (GSOC), which provides 24/7 security monitoring, threat detection, and incident response capabilities across the organisation.The Detection and Response Automation Engineer will be responsible for delivering security automation solutions that enable security operations teams to rapidly respond to an ever changing threat landscape. This person will support CGI Corporate Services teams in their automation efforts to help us better protect corporate technology platforms.
The person will be primarily responsible for the integration efforts of the Security Orchestration, Automation and Response (SOAR) platform with various enterprise security services. You will also work with other members in the security team to increase automation of manual process through the development of security automation playbooks deployed on the SOAR platform.
Position Responsibilities
AI Automation Responsibilities
Design, develop, and maintain AI powered tools that enhance security monitoring, detection engineering, incident response, and threat hunting activities.
Build intelligent assistants, AI agents, copilots, and automation workflows using Large Language Models (LLMs), Generative AI, and modern agentic AI frameworks.
Develop AI solutions that automate alert triage, investigation workflows, evidence collection, reporting, and knowledge retrieval.
Collaborate with Security Monitoring, Incident Response, Detection Engineering, Threat Intelligence, and Security Engineering teams to identify opportunities for AI driven improvements.
Security Automation Playbook Management
Document and maintain all technical aspects of the orchestration and automation playbooks
Collaborate with Global Security Shared Services (GSSS) and Global Security Operations Center (GSOC) teams in providing the advanced threat knowledge and directions which are implemented by the automation specialist
Maintain the playbook life cycle in the various environments (development, testing, production) using version control, continuous integration (CI) and continuous deployment (CD)
Security Orchestration, Automation and Response Platform Support
Act as the Subject Matter Expert (SME) responsible for the evolution of the SOAR platform
Perform reviews of the platform's new features and provides feedback on innovation that could be integrated
Collaborate with the service providers delivering the platform hosting, infrastructure platform support and orchestration component configuration to ensure that production and deployment instances are synchronized
Experience
QUALIFICATIONS TO BE SUCCESSFUL IN THIS ROLE
Knowledge of Large Language Models (LLMs), Generative AI, prompt engineering, and AI application development.
Experience developing AI applications using frameworks such as LangChain, Semantic Kernel, AutoGen, OpenAI SDKs, Microsoft AI Foundry, or similar technologies, including experience building AI assistants or agentic workflows.
Experience with Security Orchestration, Automation and Response (SOAR) platforms Palo Alto Cortex Demisto, Fortinet FortiSOAR, Splunk Phantom, Splunk SOAR or other SOAR equivalents platforms
Experience with security operations (e.g. security analyst, security application engineer, security application support, security content engineer)
Knowledge of delivering security monitoring detection and response within a global organization
Knowledge of security operations and secure application development
Experience interacting with web APIs such as REST, GraphQL or SOAP
Experience with modern software development workflows using tools such as Git, Gitlab, GitHub, Jira, or other equivalents.
Qualifications & Certifications
Bachelor's degree in Computer Science, Artificial Intelligence, Cyber Security, Software Engineering, Information Technology, or a related discipline, or equivalent practical experience.
Relevant industry certifications are desirable, including one or more of:
Microsoft AI 102: Azure AI Engineer Associate
Microsoft AI 900: Azure AI Fundamentals
CompTIA Security+
CISSP
AWS Certified AI Practitioner
Google Cloud Professional Machine Learning Engineer:
IBM AI Engineering Professional Certificate
Your future duties and responsibilities
Required Qualifications To Be Successful In This Role
Together, as owners, let’s turn meaningful insights into action.
Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…
You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.
Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.
You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.
That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.
Come join our team—one of the largest IT and business consulting services firms in the world.
Show more Show less