Senior AI Security Automation Engineer
10Pearls is seeking a Senior AI Security Automation Engineer to lead the automation of internal security testing, security operations, compliance evidence collection, and security roadmap execution. This position focuses on leveraging AI agents to continuously identify vulnerabilities, automate security validation, improve operational controls, and support audit readiness. The ideal candidate combines strong security engineering expertise with practical experience building and operating AI-driven security workflows in regulated environments.
This role owns internal security automation and preparation for audits, while independent annual penetration testing and formal external attestations remain the responsibility of third-party providers.
Key Responsibilities
Design and operate AI agents for internal security testing, vulnerability detection, and security validation.
Automate recurring security assessments, configuration reviews, and compliance checks.
Execute security roadmap initiatives through agent-driven automation and engineering.
Develop automated processes for collecting, validating, and organizing audit evidence.
Integrate AI security agents with cloud environments, monitoring platforms, and security tools.
Build automated vulnerability prioritization, remediation recommendations, and tracking workflows.
Establish secure approval processes and human oversight for sensitive remediation activities.
Ensure AI-generated code and infrastructure changes undergo required security validation before production.
Maintain auditability, traceability, and compliance across automated security operations.
Coordinate with third-party security providers when supporting external testing and attestations.
Independently identify security improvements and drive implementation.
Required Qualifications – Must Have
Strong professional experience in security engineering, DevSecOps, cloud security, or security operations.
2+ years of hands-on AI coding tool experience.
1+ year developing AI agents, agentic workflows, or agent harnesses.
Demonstrated use of AI agents or AI-driven security automation in production.
Experience implementing internal security testing, vulnerability management, and remediation processes.
Strong understanding of cloud security controls and identity/access management.
Experience with Azure, AWS, GCP, or equivalent cloud platforms.
Knowledge of security compliance, audit evidence, and security governance processes.
Ability to design secure automation with appropriate guardrails, approvals, and traceability.
Proven ability to independently execute security initiatives and communicate risk to stakeholders.
Strong security fundamentals and demonstrated real-world results.
Nice to Have
Microsoft Defender for Cloud and Microsoft Sentinel.
Microsoft Entra ID and Azure security architecture.
OWASP, NIST, CIS Controls, SOC 2, or ISO 27001.
GitHub Advanced Security, SAST, DAST, and dependency scanning.
AI-assisted vulnerability analysis and security orchestration.
Automated compliance evidence collection.
Security automation in highly regulated environments.
Benefits we offer
Access to e-Learning platforms.
Access to a virtual nutritionist
Amazing people oriented organizational culture
Working from anywhere
Challenging projects using the latest technologies with clients from the US.