SOAR Automation Engineer/GenAI Engineer

Who We Are

At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world's leading businesses.  We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.

The Role

Key Responsibilities

1. SOAR Automation Development

• Design, build, and maintain automation playbooks in Azure Logic Apps for triage, enrichment, containment, and remediation workflows.
• Integrate playbooks with third-party tools such as ServiceNow, Jira, Microsoft Teams, Slack, and email gateways for seamless orchestration.
• Create manual and automated triggers for alerts and incidents originating from Microsoft Sentinel and related platforms.
• Manage and refine automation rules to orchestrate multi-step, conditional responses across correlated analytics rules.
• Develop custom connectors and APIs to extend automation capabilities across cloud and on-prem environments.
• Maintain source control, versioning, and documentation for all playbooks and automation artifacts.
• Collaborate with SOC Analysts, Detection Engineers, and Platform Owners to align automations with operational priorities and security SLAs.

2. SOC Transformation & KPI Optimization

• Participate in SOC transformation workshops to identify automation opportunities, process bottlenecks, and SLA improvements.
• Work with SOC leadership to define and refine KPIs related to Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), ticket volume reduction, and manual intervention rates.
• Contribute to continuous improvement cycles by analyzing automation performance, user adoption, and incident outcomes.
• Support audit and governance reviews by maintaining compliance-ready automation documentation.

3. Power BI Analytics & Visualization

• Design and maintain real-time, interactive Power BI dashboards providing end-to-end visibility into SOC operations, incident trends, and performance metrics.

• Build CXO-level and SOC lead dashboards using Power BI Service and Desktop, integrating data from:

• Microsoft Sentinel (Incidents, Alerts)

• Azure Monitor / Log Analytics
• Kyndryl Bridge, ServiceNow, and other telemetry sources.
• Implement predictive analytics and anomaly detection layers using GenAI and ML models to forecast risk and detect outliers.
• Automate data refreshes, alerting, and scorecards to support SLA and KPI tracking.
• Collaborate with governance and operations teams to define data models, DAX measures, and visual standards for SOC reporting.

4. GenAI Engineering & Intelligent Automation

• Design and embed GenAI-powered workflows into SOC processes for incident summarization, automated RCA generation, and contextual threat response.
• Co-develop AI-driven playbooks and prompt templates that continuously learn and adapt based on incident data.
• Use Microsoft Copilot Studio, Copilot Agents, and Kyndryl Bridge AI services to enable autonomous detection and response orchestration.
• Develop conversational interfaces and chatbot visual layers within Power BI and SOC portals for interactive, AI-guided analytics.
• Ensure AI systems follow Responsible AI practices, including explainability, fairness, and human-in-the-loop controls.
• Work closely with Data Scientists and AI Engineers to align GenAI capabilities with SOC goals and regulatory standards.

5. Collaboration & Governance

• Partner with SOC Leads, Incident Managers, and Content Developers to integrate automation with existing playbooks and IR procedures.
• Collaborate with Platform Engineers to maintain high performance and availability of SOAR and analytics systems.
• Contribute to SOC governance meetings, sharing insights on automation KPIs, GenAI outcomes, and CSI (Continual Service Improvement) recommendations.
• Maintain alignment between automation/AI initiatives and business objectives, cybersecurity frameworks, and compliance requirements.

Who You Are

• 6–10 years of experience in SOC Operations, Automation, or AI Engineering, preferably in large-scale or MSSP environments.

• Proven hands-on expertise in:

• Microsoft Sentinel SOAR and Azure Logic Apps

• Power BI (Service, Desktop, DAX, and Power Query)
• Azure Functions, REST APIs, and KQL (Kusto Query Language)
• Microsoft Copilot, Azure OpenAI, or Kyndryl Bridge AI for GenAI integrations
• ServiceNow / Jira / Teams / Slack APIs for workflow automation
• Experience with incident lifecycle automation, SIEM-to-ITSM integration, and multi-step orchestration.
• Familiarity with predictive analytics, anomaly detection, and GenAI prompt engineering.
• Strong understanding of SOC metrics, SLAs, and KPI tracking.
• Knowledge of data visualization, model monitoring, and AI ethics principles.

Being You

The "Kyn" in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don't meet every requirement, we encourage you to apply. We believe in growth, and we're excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging — being a valued, respected, trusted member of the team — is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That's The Kyndryl Way.

What You Can Expect

Your career with us isn't just a job—it's an adventure with purpose.  We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health—because we know that when you feel your best, you do your best.

From your very first day, you'll dive into impactful work that powers the systems our customers rely on every day. You won't just contribute—you'll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth.

We're here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you'll have everything you need to thrive and evolve. You'll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities—from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you'll be part of a culture that values empathy, restless learning, and a devotion to shared success.

We want you to thrive here—and we're committed to helping you do just that. Ready to make an impact? Join us and help shape what's next.

Get Referred

If you know someone that works at Kyndryl, when asked 'How Did You Hear About Us' during the application process, select 'Employee Referral' and enter your contact's Kyndryl email address.