Jobs in the United States

25+ jobs

Save this search

Added 7 mins ago
Senior Power Platform Administrator
General Dynamics Information Technology
Bossier City, LA
Supporting citizen developer programs by establishing appropriate governance, security, development standards, and operational guardrails
Added 7 mins ago
Senior SharePoint Administrator
General Dynamics Information Technology
Bossier City, LA
Administering SharePoint Server, including Central Administration, service applications, PowerShell scripting, backup and recovery, cumulative updates (CUs), health monitoring, and…
Added 7 mins ago
AWS Network Security Engineer *
CGI Technologies and Solutions, Inc.
Lafayette, LA
. Basic scripting experience with Python, PowerShell, or Bash for automation and operational tasks.
Added 7 mins ago
Senior DevOps Engineer
CGI Technologies and Solutions, Inc.
Lafayette, LA
. Strong scripting experience using Python, Bash, PowerShell, or Groovy.
Added 11 mins ago
Senior DevSecOps Engineer (Azure Experience) - Remote (USA)
Echelon Risk + Cyber
Washington D. C., DC
Added 41 mins ago
Google Cloud Platform - SRE Manager
Huntington National Bank
Pittsburgh, PA
Minimum of 5 years of experience developing automated solutions using IaC - Terraform or OpenTofu. Additional experience is a plus: Python, PowerShell, Ansible, Chef, Ruby, and JSON.
Added 41 mins ago
Cyber Offensive Security Senior Associate
Grant Thornton
Philadelphia, PA
Scripting and automation skills (e.g., Python, PowerShell, Bash).
Added 48 mins ago
Azure Engineer
Vamonos IT
Ashburn, VA
Develop, maintain, and optimize PowerShell scripts to automate infrastructure administration, deployments, and monitoring processes.
Added 57 mins ago
Zero Trust ICAM Engineer
Booz Allen Hamilton_United States
Fayetteville, NC
Experience scripting in Bash, PowerShell, JavaScript, or Python
Added 58 mins ago
Sr. Instructor, Training- Cloud Security (Remote)
CrowdStrike, Inc.
Remote, United States
Programming/Scripting: Python, PowerShell, Bash, or similar
Added 1 hour ago
Google Cloud Platform - SRE Manager
Huntington National Bank
Hagerstown, MD
Minimum of 5 years of experience developing automated solutions using IaC - Terraform or OpenTofu. Additional experience is a plus: Python, PowerShell, Ansible, Chef, Ruby, and JSON.
Added 1 hour ago
Senior DevSecOps Platform Engineer
CGI Technologies and Solutions, Inc.
Baltimore, MD
Develop operational tooling, bots, and integrations using Python, Java, Node.js, Bash, PowerShell, or other languages to automate repetitive platform and remediation work.
Added 1 hour ago
DevSecOps Engineer (Mid-level)
CGI Technologies and Solutions, Inc.
Baltimore, MD
Develop automation and operational tooling using Python, Java, Node.js, Bash, PowerShell, or other scripting languages.
Added 1 hour ago
Electronic Engineer - SW Infrastructure
Northrop Grumman
San Diego
Automating tasks using Ansible, Bash, PowerShell, Puppet or Python.
Added 1 hour ago
MA
2027 Technology Development Program - Software Engineering (Data Engineering)
Manufacturers and Traders Trust Co
Buffalo, NY
- $29.57 to $43.99 USD / hour
…technologies and programming languages including SQL, Python, PowerShell, SQL Server, and Databricks, while supporting work across database development, ETL pipelines, data management,…
Added 1 hour ago
Cyber Security Operations Center Analyst / AI-Automation Engineer
Micron Technology
Boise
…changes. Build scripts, playbooks, and integrations with Python, PowerShell, REST APIs, SOAR, and workflow platforms that connect security tools, telemetry sources, and case-management…
Added 1 hour ago
Network Development Engineer II - Wireless, OTN-Wireless
Amazon
Nashville, TN
1+ years coding and automating network operations using Python, C, C++, Java, Ruby, or PowerShell
Added 1 hour ago
Desktop Support Technician
VXI GLOBAL SOLUTIONS LLC
Dallas, TX
Use PowerShell and command-line tools to perform administrative tasks and collect system information.
Added 2 hours ago
Installation Technician
LEIDOS, INC.
Alexandria, VA
Basic to intermediate technical skills in scripting, programming, or development tools such as HTML, Python, JavaScript, Java, SQL, PowerShell, and Visual Studio.
Added 2 hours ago
Engineer II - DevSecOps
Exelixis Inc
Alameda, CA
Proficiency with a scripting or programming language such as Python, PowerShell, JavaScript/TypeScript, or Java, and with command-line tooling.
Added 2 hours ago
Senior Principal Software Application Security
The Huntington National Bank
Remote, United States
Experience developing solutions using multiple programming languages such as Python, Java, C#, JavaScript/TypeScript, Go, SQL, PowerShell, and scripting languages.
Added 2 hours ago
Senior Azure Cloud Engineer
East Peoria, IL · Nashville, TN · Irving, TX
Deploy Azure cloud technologies based on requirements gathered from business partners using skills such as PowerShell, ARM templates, Azure CLI, VBS, Python, Java, NodeJS, JSON, YAML, Bash,…
Added 2 hours ago
Senior Kubernetes Engineer
Peraton
Remote, United States
Certified Kubernetes Administrator (CKA) or Certified Kubernetes Application Developer (CKAD), plus Microsoft Azure Administrator Associate (AZ-104) or Microsoft Azure Solutions Architect…
Added 2 hours ago
T
Sql Server Database Administrator
TEKsystems
San Diego, CA
- $70 to $75 USD / hour
Automate routine administrative tasks using PowerShell, T-SQL, and related tools
Added 2 hours ago
Power Platforms Junior Engineer
Serco
Montpelier, VT
Familiarity with scripting/development: Power Fx, JavaScript/TypeScript, PowerShell; experience with Azure services (Functions, AD/Azure AD) is desirable.

Micron Technology

Cyber Security Operations Center Analyst / AI-Automation Engineer

Boise, United States

Apply About employer

Applications open in a new tab.

Job details

Apply by: May 2, 2027
Posting language: English
Posted: Nov 3, 2026

Original job description

Req ID:

JR116338 Cyber Security Operations Center Analyst / AI-Automation Engineer

Our vision is to transform how the world uses information to enrich life for all.

Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever.

The Cyber Security Operations Center (CSOC) Analyst / AI-Automation Engineer is a hybrid cybersecurity role that combines security operations, threat investigation, detection engineering, and AI-enabled automation development. You will investigate and respond to cyber threats. You will also improve how Cyber Defense operates by automating repetitive analyst workflows, engineering automated responses, strengthening detections, and building AI-assisted capabilities that increase speed, consistency, and scale.

This is not a traditional SOC analyst role. When you find a repetitive process, you will ask whether it can be automated. When you find a detection gap, you will help engineer the fix. When you develop an effective investigation technique, you will turn it into a reusable playbook, automation, or AI-enabled capability. Success means handling security events well and leaving the Cyber Defense organization more capable after every investigation: defend today while engineering a better defense for tomorrow.

This role is part of the CSOC's move toward new hybrid roles and supports a 16x5 operating schedule.

Responsibilities:

Cyber Defense Operations: Investigate, triage, and respond to security alerts and incidents across endpoint, identity, network, cloud, email, and data-security environments. Hunt for malicious or anomalous activity, and correlate telemetry across security platforms to determine scope, impact, and the right response. Implement and continuously improve incident response and investigation playbooks. Partner with threat intelligence, detection engineering, incident response, vulnerability management, and other security teams on complex investigations.
Detection & Response Engineering: Develop and tune detections based on emerging threats, attack techniques, intelligence, and lessons learned from investigations. Identify detection gaps and recommend improvements to telemetry, correlation, and response logic. Translate analyst knowledge and investigation techniques into repeatable detection and response capabilities. Use frameworks such as MITRE ATT&CK to structure detection and threat-hunting coverage.
Automation & Engineering: Identify repetitive analyst work and decide whether to automate, eliminate, redesign, or keep it manual, based on volume, risk, and how often the process changes. Build scripts, playbooks, and integrations with Python, PowerShell, REST APIs, SOAR, and workflow platforms that connect security tools, telemetry sources, and case-management systems. Engineer them to production standard, with error handling, retries, idempotent actions, structured logging, and alerts when an automation fails or silently stops. Add proportionate safeguards to automated response: human approval for disruptive actions such as host containment, account disablement, or mailbox purges, plus exclusion lists, action limits, and tested rollback. Manage automation as code, with source control, peer review, non-production testing, and change-managed promotion. Use least-privilege service identities and managed secrets, and maintain credentials and API permissions over their full lifecycle. Own what you build by documenting it, monitoring its health, and maintaining it as upstream tools change. Measure outcomes such as analyst hours returned, time to triage and respond, consistency, and error rates. Focus especially on the risk that automation might close cases needing advancement.
AI-Enabled Security Operations: Design, build, and operate AI agents that support investigation, enrichment, threat analysis, and response by querying SIEM, EDR, identity, threat intelligence, and case-management systems. Build the agent tools with MCP and platform APIs, using narrowly scoped, least-privilege access and separating read-only from state-changing actions. Match autonomy to each use case so that AI informs judgment while policy-based controls govern high-impact decisions. Encode analyst expertise as reusable instructions and skills grounded in trusted sources such as runbooks and prior cases. Defend against prompt injection from untrusted content. Evaluate agents against historical analyst ground truth and run them in shadow mode before granting autonomy. Log prompts, tool calls, and evidence so every AI-influenced action is auditable. Require cited evidence and validation before AI analysis drives decisions. Look for places where AI can augment analyst judgment, not just automate existing processes.
Continuous Improvement: Treat every investigation as an opportunity to improve the broader defense capability. Document investigation logic so that analyst knowledge can be converted into detections, automation, playbooks, or AI workflows. Participate in retrospectives and recommend improvements following incidents and significant investigations. Continuously develop skills across cybersecurity, software engineering, automation, and AI.

Minimum Qualifications:

Security experience: Background in cybersecurity operations, incident response, threat hunting, detection engineering, security engineering, or a related field.
Attacker behavior and methodology: Understanding of attacker behaviors and common techniques across endpoint, identity, network, cloud, and application environments. Working knowledge of MITRE ATT&CK and modern incident investigation methodologies.
Telemetry analysis: Experience analyzing logs and security telemetry using SIEM, EDR/XDR, or similar technologies.
Automation and integration skills: Ability to develop or modify automation in at least one language or scripting technology, such as Python, PowerShell, JavaScript/TypeScript, or REST APIs. Also an understanding of APIs, JSON, authentication, and system integrations.
Problem solving and communication: Ability to fix technical problems independently and work through ambiguous security investigations, along with strong written communication and documentation skills.

Preferred Qualifications:

Security automation and detection: Experience building SOAR and security automation workflows. Also experience building or maintaining security detections, including detection-as-code practices, and a background in cloud and identity security.
Software development practices: Familiarity with Git and version control, testing, APIs, and CI/CD.
Platform integration: Experience integrating security platforms with ticketing, case-management, or workflow systems.
AI and LLM workflows: Experience building AI agents or LLM-powered workflows for security or IT operations, using a framework or platform such as Claude Agent SDK or Azure AI Foundry. Also experience building or integrating MCP servers or other tool-calling interfaces for LLMs.
AI quality and certifications: Familiarity with RAG, AI evaluation methods, or LLM observability. Relevant certifications are a plus, such as GCIH, GCIA, GCFA, GCTI, OSCP, Security+, CISSP, or cloud security certifications.

Job Profile(s):

Info Security Eng E3 - Info Security Eng E5

Relocation Level: TBD

Before Getting Started Please review Micron’s Internal Job Application Policy on your regional PeopleNow Career Opportunities page before searching and applying for jobs. Note in particular that:

Hiring managers may view your performance appraisals, original resume, transcripts or other performance-related documentation in your personal file. This information will be held in confidence.
If you are selected to interview for a position, you must notify your direct supervisor before participating in the interview process.

As a world leader in the semiconductor industry, Micron is dedicated to your personal wellbeing and professional growth. Micron benefits are designed to help you stay well, provide peace of mind and help you prepare for the future. We offer a choice of medical, dental and vision plans in all locations enabling team members to select the plans that best meet their family healthcare needs and budget. Micron also provides benefit programs that help protect your income if you are unable to work due to illness or injury, and paid family leave. Additionally, Micron benefits include a robust paid time-off program and paid holidays. For additional information regarding the Benefit programs available, please see the Benefits Guide posted on Benefits | Micron Technology, Inc

Micron is proud to be an equal opportunity workplace and is an affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, age, national origin, citizenship status, disability, protected veteran status, gender identity or any other factor protected by applicable federal, state, or local laws.

To learn about your right to work click here.

For US Sites Only: To request assistance with the application process and/or for reasonable accommodations, please contact Micron’s People Organization at hrsupport_na@micron.com or 1-800-336-8918 (select option #3)

Apply About employer

More about this job

Skills

Cybersecurity
Apply information security policies
Incident response
Check methods
MITRE ATT&CK
Python
Microsoft PowerShell
API development
Workflow
Case management
Process improvement
JavaScript
TypeScript
Problem solving
Communication skills
Documentation
Software development
Git
CI/CD
Microsoft Azure

Report this job