Senior SOC Analyst (AI Analyst & Automation Eng...

@ Freshworks

Company Description

Organizations everywhere struggle with complex and costly solutions. Freshworks offers a fresh vision by providing uncomplicated service software that delivers exceptional customer and employee experiences. Over 72,000 companies worldwide trust Freshworks to fuel customer loyalty with innovative CX and EX software.

Job Description

We are seeking a hybrid cybersecurity operations and AI engineering expert to develop, customize, and operationalize AI-powered SOC automation systems. This role bridges frontline SOC operations with backend AI/ML capabilities to drive intelligent alert triage, threat detection, and incident response automation using tools like Intezer, Cortex XSOAR, and custom AI pipelines.

SOC & Threat Detection Responsibilities

• Monitor and triage security alerts using AI-assisted tooling.
• Analyze, investigate, and escalate incidents using threat intel and log data.
• Provide threat context, root cause analysis, and response recommendations.
• Fine-tune detection rules, behavioral baselines, and IOC correlations.
• Serve as SME for SOC use cases and automation requirements.

AI Engineering & Automation Responsibilities

• Design and maintain ML models for anomaly detection, classification, and triage.
• Build automation workflows using SOAR platforms (e.g., Cortex XSOAR).
• Integrate AI models with SIEM, EDR, TIP, and other SOC data sources.
• Develop feedback loops based on SOC analyst input and incident data.
• Reduce false positives/negatives through intelligent alert enrichment.

Collaboration & Strategy

Collaborate with threat intel and incident response teams to drive innovation in SOC tooling through automation and AI. Maintain comprehensive documentation and model explainability, while staying ahead of adversarial threats and AI misuse in cybersecurity.

Qualifications

Must-Have: 3+ years in a SOC Analyst, Incident Responder, or Threat Hunter role; 2+ years developing or applying AI/ML in cybersecurity; proficient in Python with ML libraries (Scikit-learn, PyTorch, TensorFlow); experienced with SIEMs (Splunk, Sentinel, QRadar), SOARs (XSOAR, TheHive), and EDRs (CrowdStrike, Defender); strong knowledge of MITRE ATT&CK and threat detection methodologies; familiarity with APIs, REST, and JSON integrations.

Nice-to-Have: Experience with malware classification, threat intel enrichment, sandbox analysis (e.g., Intezer, VirusTotal); adversarial ML, model hardening, or explainable AI; cloud-native security monitoring (AWS, GCP, Azure); familiarity with MLOps, data pipelines, or production model deployment.

Additional Information

Freshworks is committed to diversity and equal opportunity. Our global workplace enables everyone to find their true potential irrespective of background, gender, race, sexual orientation, religion, or ethnicity.