Role & responsibilities

- Develop, maintain, and enhance automated playbooks in SOAR platforms to streamline and improve incident response workflows.

- Proactive SIEM Content Management Specialist to join our security operations team. The ideal candidate.

- Will be responsible for designing, implementing, and managing custom SIEM content that supports the organization's security monitoring and threat detection capabilities.

- Ensuring that our SIEM system is optimized to detect, analyze, and respond to potential security threats effectively and efficiently.

Preferred candidate profile

- 4-7 years of experience into Develop and optimize automation playbooks within SOAR platforms (preferably Palo Alto XSOAR/XSIAM).

- Deep understanding of security concepts, including incident response, threat intelligence, network security, and vulnerability management.

- Utilize SOAR platforms to automate security processes and response activities.

- Collaborate with security analysts and incident responders to design playbooks that automate and orchestrate the detection, triage, investigation, and remediation of security incidents.

- Integrate playbooks with a variety of security tools such as SIEMs, firewalls, threat intelligence platforms, endpoint protection tools,



and ticketing systems to improve the efficiency of the security operations center

- Test playbooks to ensure they are working as expected, troubleshoot issues, and optimize them for performance and scalability.

- Document playbook logic, workflows, and integrations to ensure that they are understandable and maintainable by other team members.

- Work closely with security engineers, analysts, and IT teams to align playbook development with security operations needs and organizational goals.

- Provide technical expertise in the configuration and optimization of SOAR tools.

- Assist in the evaluation and selection of SOAR technologies based on organizational needs.

- Document and maintain standard operating procedures for SOAR processes and playbooks.

- Experience with Cortex XSOAR (preferred) or other security orchestration platforms.

- Ability to troubleshoot issues, perform root cause analysis, and continuously optimize automation processes.

- Knowledge of scripting and automation (Python, JavaScript, PowerShell, etc.) for building playbooks and integrations.

- Bachelors orMaster’s degree in Computer Science, Information Security, or related field.

📌 Cyber Security Manager (Mumbai)
🏢 WSNE Consulting
📍 Mumbai