Responsibilities
- Design and implement AI agents that gather context, analyze security data, use approved tools, generate evidence, route work, and escalate decisions within defined guardrails.
- Develop and maintain SOAR and security automation playbooks for alert enrichment, triage, correlation, evidence capture, case creation, notifications, response recommendations, and remediation tracking.
- Automate security control calculations, evidence collection, validation, testing support, exception handling, and management reporting.
- Streamline GRC workflows including ISQ, TPSR, evidence collection, control mapping, risk flagging, exception routing, SLA tracking, and audit trails.
- Integrate SIEM, SOAR, EDR, identity, vulnerability, cloud security, ticketing, data, API, and collaboration platforms into end-to-end workflows.
- Perform other tasks assigned by the direct supervisor.
Requirements
- At least 3 years of experience in cybersecurity, SecOps engineering, security automation, platform engineering, GRC engineering, or a related role.
- Demonstrated experience building production-grade security workflows, integrations, or automation.
- Hands-on programming experience with Python or a similar language, REST APIs, webhooks, JSON, SQL, authentication, data transformation, and error handling.
- Experience with SIEM, SOAR, EDR, case-management, ticketing, GRC, or comparable security platforms.
- Practical understanding of alert triage, security investigations, incident response, remediation, and operational security metrics.
- Experience developing LLM-enabled workflows or agents that use tools, retrieve enterprise context, maintain traceability, and incorporate human review.
Benefits
- Onsite work arrangement.
- OPSWAT is an equal opportunity employer committed to a diverse, nondiscriminatory workplace.
Categories
About OPSWAT
OPSWAT protects critical infrastructure. Our goal is to eliminate malware and zero-day attacks. We believe that every file and every device pose a threat. Threats must be addressed at all locations at all times—at entry, at exit, and at rest. Our products focus on threat prevention and process creation for secure data transfer and safe device access. The result is productive systems that minimize risk of compromise. That’s why 98% of U.S. nuclear power facilities trust OPSWAT for cybersecurity and compliance. OPSWAT. Trust no file. Trust no device. www.opswat.com Visit us on Twitter, Facebook, Instagram, and YouTube. http://www.twitter.com/opswat http://www.facebook.com/opswat https://www.instagram.com/opswat https://www.youtube.com/user/opswat1