27 Aug
|
WSNE Consulting
|
Mumbai
27 Aug
WSNE Consulting
Mumbai
Job Description
Develop, maintain, and enhance automated playbooks in SOAR platforms to streamline and improve incident response workflows.
The candidate will be responsible for designing, implementing, and managing custom SIEM content to support security monitoring and threat detection capabilities and ensure effective detection, analysis, and response to potential security threats.
Mandatory Skills & Relevant Experience
1. Cortex XSOAR / XSIAM Hands-on experience required.
2. SOAR Hands-on experience in security orchestration and automation required.
3. SOAR Playbook Development – Experience developing, maintaining, testing, and optimizing automation playbooks required.
4. Security Automation – Experience automating incident detection, triage, investigation, and response.
5. SIEM – Experience in SIEM content management and integration with SOAR.
6. Incident Response – Practical experience in security incident response and security operations.
7. Security Tool Integration – Experience integrating SOAR with SIEM, firewalls, threat intelligence, EDR/endpoint protection,
and ticketing systems.
8. Scripting & Automation – Experience with Python, JavaScript, or PowerShell for automation and integrations.
9. Troubleshooting & RCA – Experience troubleshooting playbooks, performing root-cause analysis, and optimizing automation processes.
Key Responsibilities
- Develop and optimize automation playbooks within SOAR platforms, preferably Palo Alto Cortex XSOAR/XSIAM.
- Collaborate with security analysts and incident responders to automate security workflows.
- Integrate playbooks with SIEMs, firewalls, threat intelligence, endpoint protection, and ticketing systems.
- Test, troubleshoot, and optimize playbooks for performance and scalability.
- Document playbook logic, workflows, integrations, and SOPs.
- Provide technical expertise in SOAR configuration and optimization.
- Work with security engineering, SOC, and IT teams to align automation with security operations re
📌 Consultant Cyber D&R XSOAR (Mumbai)
🏢 WSNE Consulting
📍 Mumbai