WTW

The Senior AI Security & Automation Engineer plays a pivotal role in enhancing the efficiency and maturity of the organisation’s security operations by designing and implementing robust automated solutions. Working in close collaboration with Global Information and Cyber Security Defence (ICSD) function, this role identifies opportunities to streamline processes, accelerate incident response, and reduce operational overhead through intelligent automation. In addition to building scalable automation workflows this individual will contribute to the broader Security Engineering team, including supporting Detection Engineering through the design, development, and optimisation of high-fidelity threat detections, ensuring effective visibility of threats across the environment. The ideal candidate combines a deep understanding of cybersecurity operations with a strong background in scripting, automation, and detection engineering practices to build scalable, resilient, and secure systems. The Role: * Design and deploy AI-driven security agents leveraging Large Language Models (LLMs) to automate traditionally manual security operations and workflows. * Leverage LLM-powered platforms such as Microsoft Security Copilot to support cybersecurity tasks including threat hunting, triage, investigations and response, and creating security incident response playbooks. * Build and maintain SOAR playbooks integrated with various security platforms (e.g., SIEMs, EDRs, identity platforms) to streamline incident response and automation. * Lead automation initiatives to eliminate manual processes, improve the reliability and visibility of security controls, and define metrics to measure the impact of process improvements. * Ensure automation workflows and monitoring solutions are resilient, integrated, and optimized for 24/7 detection and response capabilities. * Develop, tune, and maintain detection rules and analytics within Microsoft Sentinel SIEM/XDR platforms, improving alert fidelity and aligning coverage to known threat techniques (e.g., MITRE ATT&CK). * Support the administration and management of security tools within the Security Engineering team. * Participate in proof-of-concepts for innovative security and automation solutions. * Lead security operations process improvements, including development and refinement of SOPs, playbooks, and standards. * Support security audits, assist in incident investigations, and promote adherence to security best practices across DevOps environments. * Create technical documentation and deliver enablement sessions to enhance security awareness and practices within engineering teams. * Foster a culture of security excellence by promoting secure coding and design practices across the organization.