Security Automation Engineer (SOAR Developer, AI-, Playbook Development 5+ Years Exp)
Barracuda Networks, Inc.7 months ago
Bengaluru, IndiaSenior
Responsibilities
- Engineer and enhance the Barracuda XDR SOAR solution.
- Conduct SOC R&D, detection engineering, threat hunting, threat intelligence research, and purple-team attack-and-defend activities.
- Integrate APIs and security tools into the SOC technology stack.
- Develop and maintain documentation for processes, tools, technologies, and R&D initiatives.
- Expand MITRE ATT&CK coverage through XDR detections and validate detection effectiveness.
- Investigate, triage, and help customers remediate active breaches and incidents during a rotating 24x7x365 on-call schedule.
- Train cybersecurity analysts on technologies and processes.
- Design and implement AI-driven security automations, agentic AI workflows, RAG pipelines, AI agents, and SOC automation tools.
- Integrate and manage MCP servers and agent orchestration frameworks.
- Experiment with and operationalize machine learning models for anomaly detection, alert prioritization, and signal-to-noise improvement.
- Build internal security and AI prototypes to improve SOC efficiency and accuracy.
Requirements
- At least 5 years of cybersecurity or SOC experience.
- Bachelor’s or master’s degree in cybersecurity, information security, or a related field, or related field experience.
- CIH, CEH, CompTIA Network+, CompTIA Security+, or another relevant certification.
- Experience with SIEM, SOAR, EDR, email protection, sandboxes, ticketing systems, and other SOC tools.
- Expertise analyzing advanced cyber attack vectors such as ransomware and business email compromise.
- Experience responding to active security threats and incidents.
- Experience with AWS, Azure, GCP, and APIs.
- Experience with threat intelligence research, IOC gathering, and threat hunting.
- Understanding of cybersecurity frameworks including NIST and MITRE ATT&CK.
- Fundamental understanding of corporate IT environments, networking, and cloud infrastructure.
- Hands-on experience building or working with agentic AI systems, multi-step autonomous workflows, and tool-using agents.
- Experience implementing RAG architectures, including vector databases, embeddings, and context retrieval strategies.
- Familiarity with LLMs, including OpenAI and open-source models, and their cybersecurity applications.
- Experience integrating AI into production environments through API orchestration and automation pipelines.
- Exposure to MCP servers, agent frameworks, or similar orchestration systems.
- Strong understanding of applying AI/ML to security operations problems such as alert fatigue, threat detection, and incident response.
- Ability to evaluate and tune AI outputs for accuracy, reliability, and security relevance in a SOC environment.
- Strong troubleshooting, analytical, problem-solving, verbal communication, and written communication skills.
- Customer service experience.
Benefits
- Equity in the form of non-qualifying options.
- Internal mobility, cross-training, and opportunities for career advancement.
- Rotating 24x7x365 on-call schedule is part of the role.
Tech Stack
Categories
About Barracuda Networks, Inc.
Barracuda Networks builds cybersecurity products and services for businesses and managed service providers, spanning email protection, application and network security, data protection/backup, and managed XDR delivered as appliances and SaaS. Founded in 2003 and headquartered in Campbell, CA, it is privately held by Kohlberg Kravis Roberts & Co. Customers use Barracuda to secure cloud and on‑premise environments across Microsoft 365 and other enterprise workloads.