← All roles

Security Technical Lead - AI SOC

AHEAD· MS Security / Managed Services
Apply on company site
Remote$160k - $200kFull-timePosted 3mo ago

About the role

Production security engineer embedded with customer security and engineering teams to make security operations more effective, measurable, and resilient. Owns outcomes across assessment, design, build, deployment, optimization, and operational handoff with a primary focus on security engineering for AI-enabled environments.

Responsibilities

  • Embedded Security Engineering and Delivery - Work with customer security, engineering, platform, and infrastructure teams to deliver production-ready security outcomes; Serve as the technical lead for security engineering engagements from discovery and assessment through hardened deployment and optimization; Assess security posture, requirements, and tooling; translate requirements into secure architectures and measurable outcomes; own delivery outcomes and drive execution; lead architecture design sessions, threat modeling, reviews, and hands-on sessions; communicate risk in business terms; act as trusted advisor during onboarding, implementation, rollout, and continuous improvement.
  • Security Operations, Detection, and Response - Design and implement integrations across SIEM, XDR, SOAR, case management, threat intelligence, identity, endpoint, cloud, network, and application security platforms; build and operate telemetry pipelines; partner with SOC and detection teams to improve coverage and workflows; define, develop, test, deploy, tune, and retire detections; translate threat intel into prioritized use cases; validate detection logic; establish detection-as-code; own SIEM and security-data management; define telemetry requirements and data-quality controls; develop playbooks and automated workflows; build tooling to improve signal quality and reduce analyst burden; support behavioral analytics, anomaly detection, and risk scoring; track practical measures of security improvement; troubleshoot issues with cross-functional teams.
  • Secure AI and AI-Enabled Security Operations - Apply AI and automation to security outcomes (alert enrichment, triage, investigation summaries, clustering, playbook selection, threat analysis, analyst copilots); assist customers in adopting LLM, RAG, and agentic capabilities; lead or support threat modeling for AI-enabled architectures; identify and mitigate AI-specific risks; define AI security guardrails; secure AI control planes and data flows across cloud and hybrid environments; support AI governance aligned to frameworks like NIST AI RMF; contribute to AI-specific detection content and response procedures; ensure explainability of AI-enabled security solutions.
  • Cloud, Platform, and Automation Engineering - Deploy secure cloud-native architectures on AWS, Azure, or GCP; apply security practices across IAM, network, endpoint, data, secrets, containers, and cloud posture; implement secure integrations via REST APIs, webhooks, event-driven workflows, queues, IaC, and policy as code; use scripting (Python, PowerShell, Bash) for automation and tooling; utilize AI-assisted development tools; create reusable deployment patterns and accelerators; design for resiliency, observability, performance, and secure operations; improve reliability with documentation, testing, monitoring, and version control.
  • Cross-Functional Leadership and Practice Development - Collaborate across multiple security and platform teams; lead technical workshops and communicate with engineering leaders and executives; mentor engineers and contribute to best practices; provide field feedback to influence platform roadmaps; publish reusable security patterns and playbooks; support proposal development and customer conversations; influence outcomes with a strong customer-service ethos.

Qualifications

  • 5+ years in security engineering, security operations, detection and response, cloud security, platform security, solutions engineering, forward-deployed engineering, or related roles
  • Demonstrated depth in at least one cybersecurity discipline (e.g., application security, SecOps/detection engineering, cloud security, IAM, offensive security, or GRC)
  • Hands-on experience with modern SOC technologies (SIEM, XDR, SOAR, case management, security analytics, threat intelligence)
  • Experience delivering end-to-end security in a customer-embedded, production, consulting, managed-services, or implementation environment
  • Experience deploying or integrating cloud-native architectures on AWS, Azure, or GCP
  • Strong understanding of security operations, incident response, detection engineering, threat hunting, cloud security, identity security, endpoint security, and security automation
  • Experience with security telemetry, data integration, normalization, enrichment, event correlation, and analytics workflows
  • Experience developing/managing detections through full lifecycle (use-case definition to retirement)
  • Experience managing security data sources (parsers, schema mapping, normalization, enrichment, routing, retention, access controls, data quality)
  • Scripting/automation skills (Python, PowerShell, Bash)
  • Familiarity with APIs and integration patterns (REST, webhooks, event-driven, queues)
  • Demonstrated ability applying AI/ML/LLMs to practical security use cases
  • Working knowledge of AI security risks and controls for LLM/RAG/AI-enabled workflows
  • Ability to lead technical engagements, own outcomes, drive execution, influence without authority
  • Clear communication of technical security risk to technical and non-technical stakeholders
  • Strong problem-solving, structured analytical thinking, and ability to operate in ambiguous environments

Skills

Required:Security operationsDetection engineeringAI securityCloud platforms

Benefits

  • Medical, Dental, and Vision Insurance
  • 401(k)
  • Paid company holidays
  • Paid time off
  • Paid parental and caregiver leave
  • Plus more (see benefits page)
Last updated Oct 21, 2026. Interested? Apply on the company site.
AHEAD logo

About AHEAD

Digital Platforms Engineered for Modern Enterprises

AHEAD accelerates the impact of technology on clients by engineering customized data, developer, and infrastructure platforms that improve IT operations.

Platform SolutionsInfrastructure ModernizationLifecycle ManagementSeamless Integration
Company profileWebsite

More open roles at AHEAD