Sr. Specialist DDIT ISC CSOC Engineering

Salary Range:

Kč948,290.00 - Kč1,761,110.00

Job Description Summary

Role purpose: Build, integrate, deploy and operate the agent platform that powers AI-enabled Cyber Defense. Engineer reliable agent tools, Azure Functions, enterprise integrations, deployment pipelines and runtime controls so agents can move safely from development to production and remain observable, recoverable and supportable.

Job Description

Key Responsibilities:

• Build and maintain the Azure Functions, APIs, services and agent tools used to retrieve trusted information and perform approved actions
• Integrate agents with enterprise platforms such as Microsoft Sentinel, Defender, Purview, Graph, Cortex XDR, XSOAR, SharePoint, JIRA, Confluence, Azure Storage, Key Vault and other approved Cyber Defense systems
• Implement agent workflows and backend services for notifications, feedback, state management, audit records, deduplication, orchestration and human approval
• Implement versioning, release controls, automated testing, rollback and recovery patterns for agents and supporting services
• Operate agent runtime reliability through telemetry, tracing, Application Insights, health checks, dashboards, alerts and actionable service-level indicators
• Investigate and resolve production incidents involving agents, Azure Functions, identities, networking, data access, integrations and deployment pipelines
• Monitor performance, latency, availability, token or model consumption, operational cost and integration health, and implement improvements based on evidence
• Maintain clear technical documentation, runbooks, support procedures, configuration records and deployment evidence

Essential Requirement:

• 6+ years of hands-on experience in software engineering, cloud platform engineering, DevOps, security automation or integration engineering
• Strong proficiency in Python and experience building production APIs, serverless functions or backend services. Practical experience with Microsoft Azure services such as Azure Functions, App Service, Key Vault, Managed Identity, Application Insights, Storage and private networking
• Experience with Git and CI/CD platforms such as Azure DevOps or GitHub Actions, including environment promotion, approvals and rollback. Experience integrating enterprise systems through REST APIs, SDKs, webhooks, certificates, OAuth 2.0 or managed identities
• Understanding of agentic AI or LLM application patterns including tools/function calling, instructions, context, state, tracing and evaluation. Understanding of secure software engineering, secrets management, least privilege, input validation and auditability
• Ability to troubleshoot across application code, identity, network, platform and dependent-service boundaries. Ability to communicate technical decisions clearly and collaborate across Cyber Defense, platform, architecture and engineering teams
• Experience with Microsoft Foundry, Azure OpenAI, agent frameworks, API Management or multi-agent implementations. Knowledge of LLMOps or AgentOps practices including prompt/instruction versioning, evaluation, tracing, cost controls and production guardrails
• Background in Cyber Defense, security operations, detection engineering or SOAR automation. Experience designing test harnesses for adversarial inputs, prompt injection, permission boundaries and tool misuse
• Experience evaluating and using frontier models for enterprise agentic AI solutions

Desirable Requirement :

• Experience with Infrastructure as Code using Bicep, ARM, Terraform or equivalent tooling. Experience with containers, Kubernetes, event-driven architectures, queues or durable workflow patterns 
• Experience building agentic applications with LangChain and LangGraph. Experience with Amazon Bedrock and its model, agent, knowledge-base or guardrail capabilities 

Expected Annual Base Salary Range for role: 948,290.00 - 1,761,110.00 CZK

The base salary offered is determined based on gender-neutral objectives, such as relevant skills, competencies and experience in accordance with the Novartis pay setting policy and upon joining Novartis will be reviewed periodically.

In addition to your base salary, you may be eligible for a performance-based bonus depending on certain performance parameters.

The rewards of being part of our team go far beyond base pay and incentives. We also offer a variety of competitive benefits in kind to help you thrive personally and professionally, such as insurance plans, retirement plans, wellbeing resources and global recognition programs. In addition, we provide flexible and hybrid working options, where possible, and minimum 14 weeks paid parental leave.

Pay equity is a fundamental principle of our employment policy and reflects our commitment to create a diverse, equitable and inclusive environment that treats all employees with dignity and respect, as outlined in our Code of Ethics.

Read our brochure to learn more about our global total rewards offering:

Note: Benefits and compensation may vary by country and are subject to local legal requirements, including provisions of collective bargaining agreements where applicable. A full overview of your compensation package, including any relevant collective bargaining agreement details applicable to your role based on your employment location and Novartis employer entity, will be communicated separately to you during the application process.

Commitment to Diversity & Inclusion:

Novartis is committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.

Accessibility and accommodation:

Skills Desired

Communication, Cybersecurity Compliance, Cyber Threat Hunting, Cyber Threat Intelligence, Cyber Threat Prevention, Decision Making, Digital Capabilities, Influencing Skills, Information Security Risk Management, Technology Use, Vulnerability Management