Note: Looking for 0-30 Days Joiners only
Security Orchestration and Automation
As part of this profile, the resource will perform the following:
Platform Management and Administration
Manage, administer, and support the SOAR platform
(Preferable CrowdStrike Falcon Fusion SOAR, including:
o Master Console
o SOAR SME
o SOAR Agents
o Platform updates, configuration management, and issue resolution
Connector and Integration Management
Monitor, troubleshoot, and resolve issues with SOAR connectors and system integrations.
Ensure seamless and continuous data exchange between SOAR and all integrated security solutions (e.g., SIEM, EDR, firewall, threat intel, ticketing).
Backup and Configuration Management
Perform monthly backups of SOAR:
o Playbooks
o Configuration data
o System settings and alerts
o Agent and SME nodes
Vendor Coordination
Act as the primary point of contact with Fortinet for:
o Issue escalation and troubleshooting
o Platform patches and upgrades
o Enhancement requests and license tracking
Track and close vendor support tickets in accordance with SLA timelines.
Platform Health and Optimization
Conduct quarterly health checks to assess:
o System performance and load handling
o Integration health and response accuracy
o Use case effectiveness
Recommend and implement enhancements to improve operational efficiency and incident response timelines.
Access Management and Governance
Manage user roles, permissions, and platform access control.
Conduct quarterly access reviews to ensure RBAC enforcement and privilege hygiene.
SOP Documentation and Knowledge Base
Document, maintain, and regularly update:
o Standard Operating Procedures (SOPs)
o Playbook logic flows
o Integration procedures and manual override guidelines
Performance Reporting
Provide periodic performance reports including:
o Playbook execution metrics
o Manual vs. automated response ratios
o Integration status
o SOC efficiency improvements via automation
Integration with Security Ecosystem
Integrate