AI Security & Automation Engineer
First seen by Alion on Oct 30, 2026.
Shifts : Morning : 6 : 00 AM - 3 : 00 PM and Evening : 3 : 00 PM - 12 : 00 AM (Rotational shift but no night shift)
About Aeries :
Aeries is a global services company providing technology and business solutions. Founded in 2012, Aeries Technology is a Nasdaq-listed global professional services and consulting partner, headquartered in Mumbai, India, with centres in the USA, Mexico, Singapore, and Dubai. We help mid-sized technology companies scale, optimise, and transform their business operations through deep vertical expertise, functional capabilities, fit-for-purpose systems, and customised engagement models. Aeries is Great Place to Work certified by GPTW India, reflecting our commitment to an inclusive and positive workplace culture. For more information, visit http : //www.aeriestechnology.com
Job Summary :
The AI Security & Automation Engineer will design, implement, and operate security automation solutions that convert cloud and security telemetry into reliable, governed response actions. The role will focus on Microsoft Sentinel, Azure Logic Apps, SOAR engineering, secure API integration, KQL-based detection and automation, Security Copilot and approved AI services, vulnerability management, and DevSecOps practices. The successful candidate will work with Security Operations, Cloud, Infrastructure, Application, and IT teams to improve detection, response speed, control effectiveness, and operational resilience.
Key Responsibilities :
- Design, develop, test, deploy, and maintain Microsoft Sentinel automation rules and Azure Logic Apps playbooks for repeatable incident-response scenarios.
- Engineer controlled response actions such as token revocation, user or identity containment, device isolation, malicious indicator blocking, case enrichment, notification, and evidence collection.
- Own SOAR architecture, use-case mapping, playbook tuning, exception handling, monitoring, and continuous improvement.
- Develop and optimise KQL queries, analytic rules, workbooks, automation triggers, and integrations that improve security detection and response.
- Integrate Microsoft Security Copilot, Microsoft Copilot Studio, Agent 365, approved AI services, and security data sources into governed workflows with appropriate validation, human approval, logging, and guardrails.
- Apply secure-by-design practices to APIs, service principals, managed identities, secrets, permissions, connectors, and automation components.
- Build and maintain CI/CD pipelines for security content using GitHub or equivalent repositories, including version control, peer review, testing, deployment, rollback, and documentation.
- Monitor automation health, investigate failures, manage schema or API changes, and resolve reliability, performance, and latency issues.
- Support vulnerability management activities, including vulnerability analysis, web application scanning, remediation coordination, validation, and risk-based reporting.
- Collaborate with Security Operations, IT, Cloud, and application teams to identify automation opportunities and translate operational requirements into scalable technical solutions.
- Maintain technical documentation, playbook runbooks, architecture diagrams, test evidence, change records, operational metrics, and audit-ready records.
- Track automation effectiveness through measurable indicators such as response time, successful execution rate, manual effort reduction, recurring failure rate, and coverage of priority use cases.
Qualifications :
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.
- 4+ years of relevant experience in cloud security engineering, security automation, SOC engineering, DevSecOps, or related security operations roles.
- Hands-on experience with Microsoft Sentinel, Azure Logic Apps, KQL, REST APIs, identity and access controls, and security automation or platforms.
- Experience with infrastructure-as-code or deployment templates such as ARM or Bicep, and source-control platforms such as GitHub.
- Working knowledge of Microsoft Defender security products, Entra ID, Azure security services, networking, endpoint security, and incident-response processes.
- Practical understanding of vulnerability management and web application security testing.
- Hands-on penetration-testing experience is an advantage.
- Relevant Microsoft certifications such as SC-200, AZ-500, SC-100, or equivalent security and cloud certifications are desirable.
Required Skills :
- Strong analytical, troubleshooting, and problem-solving skills.
- Ability to write maintainable automation workflows and scripts with clear error handling, logging, and security controls.
- Sound understanding of secure coding, least privilege, secrets management, change management, and production support practices.
- Awareness of AI security risks, prompt safety, data protection, model or agent governance, and responsible use of AI in enterprise workflows.
- Good written and verbal communication skills, with the ability to explain technical risks and solutions to technical and non-technical stakeholders.
- Automation-first mindset with a focus on reliability, measurable improvement, documentation, and continuous learning.
- Ability to work independently and collaboratively in a fast-paced, cross-functional environment
Skills
Security, Security Architect - AI, SOAR, Logic App, SecOps, DevSecOps, Sentinel, KQL, CI/CD Pipeline, Vulnerability Management, Entra ID