CGI logo

Detection & Response Automation Engineer

CGI • Bengaluru, Karnataka, India

onsitefull-time
Posted Sep 29, 2026Apply by Oct 29, 2026

**Role & seniority: ** Senior Consultant – Detection & Response Automation Engineer (GSOC; 24/7 security operations context)

**Location & work type: ** Bangalore / Hyderabad / Chennai / Pune / Mumbai; morning shift

**Stack/tools: **

  • SOAR: Splunk SOAR (also mentions equivalents: Palo Alto Cortex Demisto, Fortinet FortiSOAR, Splunk Phantom, etc.)

  • AI/LLMs & frameworks: LangChain, Semantic Kernel, AutoGen, OpenAI SDKs, Microsoft AI Foundry (or similar); prompt engineering; agentic AI frameworks

  • Dev/ops: Git, GitHub/GitLab, Jira; CI/CD; version control; REST/GraphQL/SOAP APIs

  • Top 3 responsibilities:

    • Integrate and evolve SOAR with enterprise security services to automate detection/response workflows.

    • Develop and maintain AI-powered tools/agents for alert triage, investigation, evidence collection, reporting, and knowledge retrieval.

    • Author and manage SOAR playbooks (lifecycle across dev/test/prod) with CI/CD; coordinate with GSOC/GSSS for threat knowledge and automation direction.

  • Must-have skills:

    • SOAR experience, specifically Splunk SOAR (or comparable SOAR platform)

    • Security operations background (analyst/support/content engineering) and secure application development understanding

    • Ability to build AI applications with LLMs (prompting + agentic workflows) and integrate via web APIs

    • Strong software engineering fundamentals (Git + CI/CD) for playbook development and deployment

**Nice-to-haves

Full Description

Position Description

Title: Senior Consultant - Detection & Response Automation Engineer

Location: Bangalore/ Hyderabad/ Chennai/ Pune/ Mumbai

Shift: Morning shift

Skills: Splunk SOAR

Position Description

The Detection and Response Automation Engineer is part of CGI's Global Security Operations Center (GSOC), which provides 24/7 security monitoring, threat detection, and incident response capabilities across the organisation.The Detection and Response Automation Engineer will be responsible for delivering security automation solutions that enable security operations teams to rapidly respond to an ever changing threat landscape. This person will support CGI Corporate Services teams in their automation efforts to help us better protect corporate technology platforms.

The person will be primarily responsible for the integration efforts of the Security Orchestration, Automation and Response (SOAR) platform with various enterprise security services. You will also work with other members in the security team to increase automation of manual process through the development of security automation playbooks deployed on the SOAR platform.

Position Responsibilities

AI Automation Responsibilities

Design, develop, and maintain AI powered tools that enhance security monitoring, detection engineering, incident response, and threat hunting activities. Build intelligent assistants, AI agents, copilots, and automation workflows using Large Language Models (LLMs), Generative AI, and modern agentic AI frameworks. Develop AI solutions that automate alert triage, investigation workflows, evidence collection, reporting, and knowledge retrieval. Collaborate with Security Monitoring, Incident Response, Detection Engineering, Threat Intelligence, and Security Engineering teams to identify opportunities for AI driven improvements.

Security Automation Playbook Management

Document and maintain all technical aspects of the orchestration and automation playbooks Collaborate with Global Security Shared Services (GSSS) and Global Security Operations Center (GSOC) teams in providing the advanced threat knowledge and directions which are implemented by the automation specialist Maintain the playbook life cycle in the various environments (development, testing, production) using version control, continuous integration (CI) and continuous deployment (CD)

Security Orchestration, Automation and Response Platform Support

Act as the Subject Matter Expert (SME) responsible for the evolution of the SOAR platform Perform reviews of the platform's new features and provides feedback on innovation that could be integrated Collaborate with the service providers delivering the platform hosting, infrastructure platform support and orchestration component configuration to ensure that production and deployment instances are synchronized

Experience

QUALIFICATIONS TO BE SUCCESSFUL IN THIS ROLE

Knowledge of Large Language Models (LLMs), Generative AI, prompt engineering, and AI application development. Experience developing AI applications using frameworks such as LangChain, Semantic Kernel, AutoGen, OpenAI SDKs, Microsoft AI Foundry, or similar technologies, including experience building AI assistants or agentic workflows. Experience with Security Orchestration, Automation and Response (SOAR) platforms Palo Alto Cortex Demisto, Fortinet FortiSOAR, Splunk Phantom, Splunk SOAR or other SOAR equivalents platforms Experience with security operations (e.g. security analyst, security application engineer, security application support, security content engineer) Knowledge of delivering security monitoring detection and response within a global organization Knowledge of security operations and secure application development Experience interacting with web APIs such as REST, GraphQL or SOAP Experience with modern software development workflows using tools such as Git, Gitlab, GitHub, Jira, or other equivalents.

Qualifications & Certifications

Bachelor's degree in Computer Science, Artificial Intelligence, Cyber Security, Software Engineering, Information Technology, or a related discipline, or equivalent practical experience.

Relevant industry certifications are desirable, including one or more of

Microsoft AI 102: Azure AI Engineer Associate

Microsoft AI 900: Azure AI Fundamentals CompTIA Security+ CISSP AWS Certified AI Practitioner

Google Cloud Professional Machine Learning Engineer

  • IBM AI Engineering Professional Certificate

Your future duties and responsibilities

Required Qualifications To Be Successful In This Role

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

Come join our team—one of the largest IT and business consulting services firms in the world.

Splunk SOARSecurity Orchestration, Automation, And ResponseGenerative AILarge Language ModelsPrompt EngineeringLangChainSemantic KernelAutoGenOpenAI SDKsMicrosoft AI FoundrySecurity OperationsIncident ResponseThreat DetectionSecurity Automation PlaybooksREST APIsGitmulti-location

Cookies & analytics consent

We serve candidates globally, so we only activate Google Tag Manager and other analytics after you opt in. This keeps us aligned with GDPR/UK DPA, ePrivacy, LGPD, and similar rules. Essential features still run without analytics cookies.

Read how we use data in our Privacy Policy and Terms of Service.