Full job description

Here at Appian, our values of Intensity and Excellence define who we are. We set high standards and live up to them, ensuring that everything we do is done with care and quality. We approach every challenge with ambition and commitment, holding ourselves and each other accountable to achieve the best results. When you join Appian, you’ll be part of a passionate team dedicated to accomplishing hard things, together.

AI Security Engineer (Agentic SOC)

Location: McLean, VA | On-site (5 days/week)

ABOUT THE TEAM

The Appian Information Security department continuously evaluates the global threat landscape to protect Appian operations and service offerings. Our mission is to build, monitor, and scale robust security tools and processes that shield critical corporate and customer assets from emerging threats, international security concerns, and vulnerabilities, ensuring our AI-Powered Process Automation platform remains resilient and secure.

THE OPPORTUNITY

At Appian, we believe our greatest innovations spring from in-person collaboration. Joining our team at our McLean headquarters means you will work alongside elite security architects in a high-velocity environment that prioritizes your professional growth. This role offers an unparalleled launchpad to transition academic knowledge into real-world impact, giving you direct ownership over intrusion detection capabilities and cloud-based defense strategies for our Enterprise-Grade Orchestration ecosystem.

WHAT YOU'LL DO

Build & Deploy Agents: Design, test, and deploy autonomous and semi-autonomous AI agents that integrate natively with our enterprise security stack (SIEM, EDR, XDR, and Threat Intel feeds).
Code the Playbooks: Translate traditional, human-centric SOC playbooks and analyst workflows into deterministic and heuristic agentic pipelines (using DAGs and multi-agent routing).
Optimize RAG Pipelines: Design, optimize, and maintain production-grade Retrieval-Augmented Generation (RAG) workflows to inject real-time security context, network topology, and historical incident logs into agent prompts.
LLM Performance Engineering: Continuously evaluate, benchmark, and optimize LLM performance, context window utilization, latency, and cost-efficiency across various models (OSS and commercial).
Design Human-in-the-Loop (HITL): Collaborate deeply with Tier 3 Analysts and Threat Hunters to engineer seamless HITL handoff mechanisms, ensuring agents safely escalate complex anomalies to humans.