Senior AI & Automation Engineer (Team) - 19795/19794
Veritaz AB · 6 månader – upp till 12 månader · Deadline 2026-10-29
Veritaz AB is looking for a **Senior AI & Automation Engineer** to enhance security operations through production-grade automation and AI-assisted workflows. The consultant will design and deploy scalable solutions across SecOps, identity and access management, vulnerability management, compliance, and infrastructure security. Core responsibilities include automating the full security incident lifecycle—from alert triage and enrichment to containment and remediation—and building secure AI assistants using LLMs, RAG patterns, vector search, and agentic workflows. The role also involves developing **reusable security playbooks**, integrating platforms via APIs and event-driven architectures, and implementing Infrastructure as Code and DevSecOps practices within Microsoft Security, SIEM/SOAR, and cloud-native environments. Applicants should hold a **bachelor's degree** in Cybersecurity, Computer Science, Engineering, IT, or equivalent professional experience. The position requires at least 10 years of experience in Cybersecurity, Security Engineering, SecOps, Detection Engineering, or Security Automation, alongside proven capability taking automation or AI tools from proof of concept to production. Strong hands-on proficiency with Python or PowerShell, Microsoft Sentinel, Defender XDR, and SOAR orchestration is expected. Professional certifications such as CISSP, CISM, GIAC, Red Hat Ansible, ServiceNow SecOps, or relevant Microsoft credentials, as well as experience in Zero Trust and DevSecOps frameworks, are considered advantageous.
Veritaz is a leading IT staffing solutions provider in Sweden, committed to advancing individual careers and aiding employers in ensuring the perfect talent fit. With a proven track record of successful partnerships with top companies, we have rapidly grown our presence in the USA, Europe, and Sweden as a dependable and trusted resource within the IT industry.
Role Summary
An experienced AI & Automation Engineer is needed to make security operations faster, smarter and more consistent through production-grade automation and AI-assisted security workflows. The assignment spans security operations, identity and access management, vulnerability management, compliance and infrastructure security. The consultant will build secure, scalable automation capabilities and AI assistants that support security analysts while maintaining appropriate controls for privileged and high-risk actions.
The role involves automating the full security incident lifecycle, including alert triage, enrichment, investigation, containment, remediation and evidence collection. Solutions will use Generative AI, LLMs/SLMs, RAG and agentic RAG patterns, vector search, tool calling, MCP/A2A, and LLMOps/GenAIOps practices. Controlled self-healing capabilities and human approval workflows will be incorporated where required.
Key Responsibilities
- Design, build and productionise security automation workflows across SecOps, IAM, vulnerability management, compliance and infrastructure security.
- Automate alert triage, enrichment, investigation, containment, remediation and evidence collection.
- Develop secure AI assistants and agents for security use cases using LLMs/SLMs, RAG, vector search, tool calling and agentic workflows.
- Create reusable security playbooks supporting incident response, threat hunting, identity security and endpoint security.
- Integrate security platforms through APIs, orchestration workflows, event-driven technologies and threat-intelligence integrations.
- Implement infrastructure and security automation using Infrastructure as Code, policy-as-code and DevSecOps practices.
- Develop CI/CD security controls, automated testing and secure deployment processes for automation and AI solutions.
- Improve security observability through event correlation, anomaly detection, intelligent alert reduction and closed-loop response mechanisms.
- Contribute to vulnerability and exposure management, security baseline implementation, compliance automation and Zero Trust initiatives.
- Measure and improve operational outcomes, including MTTD, MTTR, false-positive reduction, automation coverage and analyst productivity.
Technical Stack & Requirements
- Programming and scripting: Python, PowerShell, REST APIs, JSON, YAML and KQL.
- Microsoft security ecosystem: Microsoft Sentinel, Defender XDR, Entra ID, Purview, Security Copilot and Azure security services.
- Automation and Infrastructure as Code: Ansible Automation Platform, Terraform, security/policy-as-code, Azure Functions and Logic Apps.
- DevOps tooling: Git, GitHub, GitLab, GitHub Actions and Azure DevOps.
- Service management and orchestration: ServiceNow SecOps/ITSM, CMDB, Flow Designer and IntegrationHub.
- Security platforms: SIEM/SOAR, XDR/EDR, IAM/PAM, vulnerability management and threat-intelligence platforms.
- Cloud-native and integration technologies: Docker, Kubernetes, event-driven technologies and API gateways.
- AI operations: LLMOps/GenAIOps, AIOps, RAG/Agentic RAG, vector search and secure AI agent development.
Qualifications & Experience
The ideal consultant has at least 10 years of experience in Cybersecurity, Security Engineering, SecOps, Detection Engineering or Security Automation. Strong hands-on experience building enterprise security automation and integrating security platforms through APIs, workflows and orchestration is required. Candidates should have practical experience with Microsoft Security and SIEM/SOAR environments and a demonstrated ability to take automation or AI solutions from proof of concept through production deployment.
A strong understanding of incident response, vulnerability management, IAM, cloud security and security controls is required. A bachelor's degree in Cybersecurity, Computer Science, Engineering, IT or equivalent professional experience is expected. Relevant Microsoft Security Operations, Cybersecurity Architect, Identity, Azure AI or Security certifications are advantageous, as are CISSP, CISM, GIAC, Security+, Red Hat Ansible and ServiceNow SecOps certifications. Experience with ITIL, Zero Trust, DevSecOps, AIOps, SRE and FinOps is preferred.