Senior Specialist DDIT ISC CSOC Engineering

About the role

Novartis is looking for a Senior Specialist for its Cyber Defense team in Prague. The role builds, integrates, deploys and operates the agent platform that powers AI-enabled Cyber Defense. You will engineer reliable agent tools, Azure Functions, enterprise integrations, deployment pipelines and runtime controls so agents can move safely from development to production and stay observable, recoverable and supportable.

Key responsibilities

• Build and maintain Azure Functions, APIs, services and agent tools that retrieve trusted information and perform approved actions.
• Integrate agents with enterprise platforms such as Microsoft Sentinel, Defender, Purview, Graph, Cortex XDR, XSOAR, SharePoint, JIRA, Confluence, Azure Storage and Key Vault.
• Implement agent workflows and backend services for notifications, feedback, state management, audit records, deduplication, orchestration and human approval.
• Apply versioning, release controls, automated testing, rollback and recovery patterns for agents and supporting services.
• Operate agent runtime reliability through telemetry, tracing, Application Insights, health checks, dashboards, alerts and service-level indicators.
• Investigate and resolve production incidents involving agents, Azure Functions, identities, networking, data access, integrations and deployment pipelines.
• Maintain technical documentation, runbooks, support procedures, configuration records and deployment evidence.

Required profile

• 6+ years of hands-on experience in software engineering, cloud platform engineering, DevOps, security automation or integration engineering.
• Background in Cyber Defense, security operations, detection engineering or SOAR automation.
• Experience designing test harnesses for adversarial inputs, prompt injection, permission boundaries and tool misuse.
• Ability to troubleshoot across application code, identity, network, platform and dependent-service boundaries, and to communicate technical decisions clearly across Cyber Defense, platform, architecture and engineering teams.

Required skills

• Strong Python and experience building production APIs, serverless functions or backend services.
• Azure Functions, App Service, Key Vault, Managed Identity, Application Insights, Storage and private networking.
• Git and CI/CD platforms such as Azure DevOps or GitHub Actions, with environment promotion, approvals and rollback.
• REST APIs, SDKs, webhooks, certificates, OAuth 2.0 and managed identities.
• Agentic AI and LLM patterns (tools/function calling, instructions, context, state, tracing, evaluation).
• Secure software engineering, secrets management, least privilege, input validation and auditability.
• LLMOps or AgentOps practices, including prompt/instruction versioning, evaluation, tracing, cost controls and production guardrails.
• Desirable: IaC with Bicep, ARM, Terraform or similar; containers, Kubernetes, event-driven architectures, LangChain/LangGraph, Amazon Bedrock.

What we offer

• Base salary range of 948,290 to 1,761,110 CZK, set according to skills, competencies and experience.
• Possible performance-based bonus.
• Insurance plans, retirement plans, wellbeing resources and global recognition programs.
• Flexible and hybrid working where possible, and at least 14 weeks of paid parental leave.