AI & Automation Engineering, Global Security (Vice President)

Key Responsibilities

• Design, build and operate AI-assisted automation services across the security function, owning them as production services with testing, monitoring, alerting, error handling and rollback.
• Deliver automation supporting security operations, including alert triage and enrichment, case summarisation, evidence collection, detection tuning, threat intelligence synthesis, and repetitive investigative workflows.
• Partner with pillar leads to deliver AI and automation capability across the wider security domains, including access review and certification support, entitlement analysis and role mining, privileged session analysis and PAM onboarding, posture finding triage, firewall and segmentation rule rationalisation, configuration drift detection, data classification and DLP event triage, and vulnerability prioritisation and contextualisation.
• Develop LLM and agent-based workflows integrated with SIEM, EDR, SOAR, IGA, PAM, CSPM, DLP, ticketing and threat intelligence platforms via supported APIs.
• Set the global AI Security and automation roadmap in partnership with the Head of Cyber Operations and pillar leads; arbitrate competing demand across domains and determine which workflows warrant automation and which do not.
• Establish engineering standards for AI-assisted tooling across the security organisation in partnership with the Head of App & AI Security, covering prompt and tool-definition review, agent permission scoping, and output validation.
• Engineer guardrails as a primary requirement: least-privilege service identities, human-in-the-loop checkpoints for consequential actions, full audit logging of agent decisions, and defences against prompt injection and tool-definition poisoning.
• Build reusable platform components, shared integration patterns, evaluation harnesses, prompt and tool libraries so capability compounds across domains rather than being rebuilt for each team.
• Define and report measures of effectiveness, including analyst and engineer time recovered, cycle time, and quality and error rates.
• Mentor engineers in the Pune capability centre as automation delivery scales and document to a standard supportable by a follow-the-sun team.