Security Automation Engineer

About Alpha Sense The world’s most sophisticated companies rely on Alpha Sense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, Alpha Sense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content.

About Alpha Sense The world’s most sophisticated companies rely on Alpha Sense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, Alpha Sense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content.

The acquisition of Tegus by Alpha Sense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, Alpha Sense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500.

Founded in 2011, Alpha Sense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us!

We are building an AI-augmented Security Operations capability and need a Security Automation Engineer to sit at the intersection of security engineering and AI systems. You will design, build, and maintain the automation pipelines and tooling that allow our AI-driven detections, investigations, and responses to operate at machine speed. Working alongside detection engineers, threat intelligence analysts, and AI/ML engineers, you will turn manual processes into reliable, observable, and testable automation workflows in system.

AI-Powered Response Automation

Design and operate SOAR playbooks and agentic AI workflows that triage, enrich, and respond to security alerts with minimal human intervention.

Detection Engineering Support

Translate detection logic and AI model outputs into actionable, low-noise alerts. Tune thresholds and automate feedback loops to continuously improve signal quality.

Integration & Pipeline Development

Build and maintain integrations between security tools (SIEM, EDR, TIP, identity platforms) and AI inference services using APIs, event streaming, and orchestration frameworks.

Observability & Reliability

Instrument automation pipelines with metrics, logging, and alerting so the security ops team can trust and verify AI-driven decisions in production.

Automation Testing & Validation

Write tests for playbooks and automation logic. Run purple-team exercises and tabletop simulations to validate that automated responses behave correctly under adversarial conditions.

Cross-functional Collaboration

Partner with AI/ML, Dev Sec Ops , and IT teams to embed security automation into infrastructure change management workflows.

Basic Requirements

• 5+ years in security engineering, Sec Ops, or automation roles
• Proficiency in Python and/or Go for scripting and tooling
• Hands-on SOAR experience (Splunk SOAR, Palo Alto XSOAR, Tines, or similar)
• Experience with SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle)
• REST API integration and event-driven architecture
• Understanding of threat detection logic (MITRE ATT&CK, kill chain)
• Familiarity with LLM/AI APIs and prompt-driven automation workflows
• Version control and CI/CD practices (Git, Git Hub Actions)
• Cloud security fundamentals (AWS, Azure, or GCP)
• Strong written documentation habits

• Experience deploying or fine-tuning ML models for anomaly detection or NLP-based log analysis
• Familiarity with agentic AI frameworks (Lang Chain, Auto Gen, CrewAI, or similar)
• Container and orchestration experience (Docker, Kubernetes)
• Certifications:
  
  CISSP, AWS Security Specialty, or…