SOAR Automation Professional

Location: Bengaluru

Key Responsibilities:

Design, build, and implement automated workflows and playbooks in SOAR platforms (e.g., Palo Alto XSOAR, Splunk SOAR, IBM Resilient, etc.).
Integrate various security tools and data sources (SIEM, endpoint protection, threat intel feeds) into the SOAR platform.
Work closely with SOC analysts, incident responders, and security engineers to identify use cases for automation.
Continuously optimize and enhance existing playbooks to improve incident detection and response efficiency.
Create and maintain documentation for all playbooks, integrations, and automation logic.
Perform regular testing and validation of automated workflows to ensure accuracy and reliability.
Monitor SOAR system performance, troubleshoot issues, and apply patches or updates as needed.
Support security investigations by enabling automated evidence collection, correlation, and response.
Assist in defining metrics and reporting for automation effectiveness and coverage.
Stay updated with emerging threats, tools, and SOAR advancements to propose new automation opportunities.

Required Qualifications:

Bachelor's degree in Computer Science, Information Security, or a related field.
3+ years of experience in cybersecurity with at least 1–2 years focused on SOAR automation.
Proficiency with scripting languages (Python preferred).
Strong understanding of cybersecurity operations, incident response workflows, and security tools.

Experience with one or more SOAR platforms and integrating APIs from security solutions.
Knowledge of SIEM systems, endpoint detection and response (EDR), and threat intelligence platforms.
Familiarity with REST APIs, JSON, and security data formats.