Senior Automation Engineer (AI-Accelerated Threat Response)

Location: Manila Net Park Office, Manila, Philippines; flexible work schedule with available work-from-home arrangements

Company

Procter & Gamble produces globally recognized consumer brands and operates in approximately 70 countries.

What you will do

• Implement and manage SOAR automation, orchestration, and incident-response capabilities for Global Cyber Defense.
• Collaborate with the SOC, Detection Engineering, Incident Response Team, and other stakeholders to deliver security automation solutions.
• Design and upgrade SOC workflows, playbooks, pipelines, and automated response actions for emerging AI-accelerated attack techniques.
• Integrate log sources and security tools, enrich alerts, and develop workflows for efficient incident triage and containment.
• Build custom scripts and evaluate AI/LLM-assisted tooling to improve detection, triage, remediation, and response consistency.
• Analyze alert statistics and workflows to reduce false positives and guide engineering priorities.

Requirements

• Comprehensive knowledge of classic and emerging threat actor tactics, techniques, and procedures, including AI/LLM-assisted reconnaissance, exploit development, and attack automation.
• Proven experience using Python to automate security operations and incident response, including integration with AI/LLM APIs.
• Strong understanding of security architecture, tool integration, API development, and automation.
• Extensive Incident Response experience focused on reducing response time for machine-speed attacks.
• Familiarity with SOC and SOAR processes, SIEM systems, security datasets, log formats, and protocols.
• Excellent communication and collaboration skills for working with cross-functional security teams.

Culture & Benefits

• Flexible work schedule with available work-from-home arrangements.
• Performance bonus through the STAR program.
• Health insurance, fitness support, and an Employee Assistance Program.
• Opportunities to lead, guide, and collaborate on transformative cybersecurity projects.