SOAR Automation Engineer/GenAI Engineer

Who We Are

At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world's leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people-Kyndryls-that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.

The Role

Are you passionate about protecting companies from cyber threats? Do you want to be part of a team that safeguards the digital assets of cutting-edge organizations? Look no further - Kyndryl is seeking a Cybersecurity Specialist to join our team of talented Technical Specialists.

As a Cybersecurity Specialist, you will be at the forefront of protecting Kyndryl's customers' computer systems and networks from unauthorized access, use, disclosure, disruption, modification, or destruction. You will use a variety of tools and techniques to defend against a wide range of cyber threats, such as malware, ransomware, phishing attacks, and data breaches.

But that's not all - at Kyndryl, you will also have the opportunity to implement new cybersecurity systems and policies to ensure the protection of our customers' data and assets. You will monitor and review potential threats from various cybersecurity systems and conduct proof-of-concepts (POCs) with new cyber security software to evaluate its effectiveness and potential integration into the organization's systems.

Not only will you be responsible for ensuring the security of Kyndryl's customers' network and systems, but you will also enrich the organization's knowledge towards potential cyber threats and best practices. You will provide automation scripts for threat hunting in customer environments using lessons learned from Cyber-attacks.

You will also have the opportunity to conduct penetration testing and threat and vulnerability assessments of applications, operating systems, and networks, responding to cybersecurity breaches and identifying intrusions. You will research and evaluate cybersecurity threats and perform root cause analysis, all while assisting in the creation and implementation of security solutions.

Additionally, you will have the opportunity to work in the area of security innovation, creating and experimenting with "outside the box" ideas that could change the trajectory of cyber security.

This is a unique opportunity to work with cutting-edge technology, be part of a dynamic team, and make a significant impact in the world of cybersecurity. If you're up for the challenge, apply now to join Kyndryl's cybersecurity team!

• Design, build, and maintain automation playbooks in Azure Logic Apps for triage, enrichment, containment, and remediation workflows.
• Ireate manual and automated triggers for alerts and incidents originating from Microsoft Sentinel and related platforms.
• Manage and refine automation rules to orchestrate multi-step, conditional responses across correlated analytics rules.
• Develop custom connectors and APIs to extend automation capabilities across cloud and on-prem environments.
• Maintain source control, versioning, and documentation for all playbooks and automation artifacts.
• Collaborate with SOC Analysts, Detection Engineers, and Platform Owners to align automations with operational priorities and security SLAs.

• Participate in SOC transformation workshops to identify automation opportunities, process bottlenecks, and SLA improvements.
• Work with SOC leadership to define and refine KPIs related to Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), ticket volume reduction, and manual intervention rates.
• Contribute to continuous improvement cycles by analyzing automation performance, user adoption, and incident outcomes.
• Support audit and governance reviews by maintaining compliance-ready automation documentation.

• Design and embed GenAI-powered workflows into SOC processes for incident summarization, automated RCA generation, and contextual threat response.
• Co-develop AI-driven playbooks and prompt templates that continuously learn and adapt based on incident data.Use Microsoft Copilot Studio, Copilot Agents, and Kyndryl Bridge AI services to enable autonomous detection and response orchestration.
• Develop conversational interfaces and chatbot visual layers within Power BI and SOC portals for interactive, AI-guided analytics.
• Ensure AI systems follow Responsible AI practices, including explainability, fairness, and human-in-the-loop controls.
• Work closely with Data Scientists and AI Engineers to align GenAI capabilities with SOC goals and regulatory standards.

• Partner with SOC Leads, Incident Managers, and Content Developers to integrate automation with existing playbooks and IR procedures.
• Collaborate with Platform Engineers to maintain high performance and availability of SOAR and analytics systems.
• Contribute to SOC governance meetings, sharing insights on automation KPIs, GenAI outcomes, and CSI (Continual Service Improvement) recommendations.
• Maintain alignment between automation/AI initiatives and business objectives, cybersecurity frameworks, and compliance requirements.

• Job Qualifications

• 6-10 years of experience in SOC Operations, Automation, or AI Engineering, preferably in large-scale or MSSP environments.
• Proven hands-on expertise in:
  • Microsoft Sentinel SOAR and Azure Logic Apps
  • Power BI (Service, Desktop, DAX, and Power Query)
  • Experience with incident lifecycle automation, SIEM-to-ITSM integration, and multi-step orchestration.
• Familiarity with predictive analytics, anomaly detection, and GenAI prompt engineering.
• Strong understanding of SOC metrics, SLAs, and KPI tracking.
• Knowledge of data visualization, model monitoring, and AI ethics principles.