Experience: 8-12 years
Work location: Chennai

Roles and responsibilities:

Design, develop, and maintain SOAR playbooks for automated incident response and security operations workflows.
Integrate security tools such as EDR, email security, threat intelligence, ticketing, and IAM platforms with SOAR solutions.
Manage and optimize SIEM use cases, correlation rules, alerts, dashboards, and reporting.
Analyze security events, investigate incidents, and improve detection capabilities.
Develop automation workflows to reduce manual effort and improve SOC efficiency.
Collaborate with SOC, Threat Hunting, and Incident Response teams to enhance security operations.

Required Skills:
Hands-on experience with SOAR platforms (Microsoft Sentinel Automation, Cortex XSOAR, Splunk SOAR, Swimlane, etc.).
Solid experience with SIEM solutions (Microsoft Sentinel, Splunk, QRadar, ArcSight, LogRhythm, etc.).
Knowledge of security operations, incident response, threat intelligence, and log analysis.
Scripting experience in Python, PowerShell, or REST APIs for automation and integrations.
Understanding of MITRE ATT&CK;, security frameworks, and cybersecurity best practices.

📌 SOAR Automation engineer (Chennai)
🏢 Hexaware Technologies
📍 Chennai