Senior Security Analyst (Security Operations & Agentic AI)

Job TypeFull Time

LocationRemote

ExperienceMinimum 5–6 years of relevant security leadership and hands-on delivery experience

Posted On01-10-2026

Qualifications

Bachelor’s degree in Computer Science/IT/Cybersecurity or related field. Relevant security certifications are an advantage.

Job Description

Role Overview:

We are looking for a hands-on security professional who can lead our organizational security functions and apply agentic AI to practical cybersecurity challenges.

The ideal candidate will combine strong security operations experience with the ability to build, test, and demonstrate AI-assisted security workflows using OpenAI Codex or comparable agent harnesses and frameworks. Candidates must bring current implementation experience and be ready to contribute to agentic AI projects from the outset.

Key Responsibilities:

• Security leadership and operations
  • Own and improve day-to-day security operations across endpoints, identities, networks, cloud infrastructure, applications, and business data.
  • Maintain a prioritized security improvement roadmap based on business risks, operational needs, and audit findings.
  • Lead incident investigation, containment, recovery, root-cause analysis, and corrective actions.
  • Manage vulnerability identification, risk-based prioritization, remediation coordination, and closure verification.
  • Implement and improve controls involving SIEM, EDR/XDR, identity and access management, MFA, endpoint management, email security, and data loss prevention.
  • Maintain security policies, incident response playbooks, access review processes, and security awareness initiatives.
  • Coordinate with IT, engineering, business stakeholders, and external security providers to deliver measurable improvements.
  • Report security posture, significant risks, incidents, and remediation progress to management.
• Agentic AI and security automation
  • Identify security processes where AI agents can reduce manual effort, improve investigation quality, or accelerate remediation.
  • Build and maintain workflows using Codex or comparable tools that can work with code repositories, execute approved tools, interact with APIs, and produce verifiable outputs.
  • Integrate AI workflows with security platforms, ticketing systems, repositories, and internal knowledge sources.
  • Review and test AI-generated scripts, detections, findings, and remediation proposals before operational use.
  • Apply appropriate controls for sensitive data, credentials, tool permissions, execution environments, audit logging, and human approval of consequential actions.
  • Evaluate workflows for accuracy, false positives, reliability, cost, and measurable operational benefit.

Required Skills & Experience:

• At least 5–6 years of experience leading and delivering organizational security functions, including responsibility for an environment supporting 200 or more users.
• Demonstrated ownership of security outcomes, including incident handling, control implementation, risk reduction, and remediation follow-through.
• Strong working knowledge of endpoint security, identity security, network security, cloud security, and data protection.
• Hands-on experience with SIEM and EDR/XDR platforms, vulnerability management tools, and security investigations.
• Ability to write, understand, troubleshoot, and maintain Python, PowerShell, or Bash scripts.
• Practical experience with Git, APIs, structured data, and automation integrations.
• Current hands-on experience building agentic AI workflows using Codex or comparable agent harnesses. General chatbot usage or prompt-writing experience alone is insufficient.
• Ability to explain an agent’s tools, permissions, context, execution steps, failure modes, and validation approach.
• Strong communication skills, with the ability to translate technical findings into clear business risks and actions.

Examples of Relevant AI Projects:

Candidates should be able to demonstrate one or more practical use cases such as:

• Alert investigation: Enrich security alerts with relevant logs and asset context, then produce evidence-backed investigation summaries.
• Phishing analysis: Examine suspicious emails, extract indicators, correlate available evidence, and recommend response actions.
• Vulnerability management: Combine scanner findings with asset criticality and exposure to prioritize remediation and prepare tickets….