AI Security & Automations Engineer

Required Qualifications: Bachelor’s degree in computer science, Information Security, or a related field, or equivalent work experience. 5+ years of experience in cybersecurity, with a focus on security engineering and automation. Comfortable writing scripts using languages such as Python, PowerShell, or Bash, and experience with automation platforms such as Azure Logic Apps, SOAR tools (e.g., Microsoft Sentinel, Splunk SOAR, Cortex XSOAR). Experience designing SOAR workflows for automated security response and incident triage. Proven experience with Large Language Models (LLMs) such as Claude, GPT-4, OpenAI, Azure OpenAI, or similar frameworks. Deep understanding of cybersecurity domains, including incident response, threat detection, and Identity and Access Management (IAM) principles. Experience with RESTful APIs, JSON, and integrating various security platforms. Familiarity with cloud platforms and cloud-native security services. Knowledge of Microsoft Security products such as Microsoft Sentinel, Microsoft Defender XDR, Microsoft Defender for Cloud, Microsoft Intune, etc. Solid understanding of ITSM and change control processes. Understanding log management, SIEM tools, endpoint detection and other security platforms. Other Knowledge, Skills and Abilities Strong communication and collaboration skills, with proven experience working in cross-functional global teams. Strong problem-solving and critical thinking skills for addressing security issues and finding effective solutions. Outstanding written and verbal communication skills. Ability to work both independently and collaboratively in a fast-paced environment. Strong communication skills, with the ability to explain security concepts to non-technical stakeholders.

Certifications (Preferred): Microsoft Certified: Azure Security Engineer Associate (AZ-500) Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Microsoft Certified: Security Operations Analyst Associate (SC-200) Certified Information Systems Security Professional (CISSP) Certified Automation Professional (CAP) Certified Cloud Security Professional (CCSP) CompTIA Security+ / CySA+ / CASP+ Any other relevant security automation or cloud security certifications

We’re committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email candidate.helpdesk@willistowerswatson.com.