Experience: 8-12 years

Work location: Chennai

Roles and responsibilities:

- Design, develop, and maintain

SOAR playbooks for automated incident response and security operations workflows.

- Integrate security tools such as EDR, email security, threat intelligence, ticketing, and IAM platforms with SOAR solutions.

- Manage and optimize

SIEM use cases, correlation rules, alerts, dashboards, and reporting.

- Analyze security events, investigate incidents, and improve detection capabilities.

- Develop automation workflows to reduce manual effort and improve SOC efficiency.

- Collaborate with SOC, Threat Hunting, and Incident Response teams to enhance security operations.

Required Skills:

- Hands-on experience with

SOAR platforms

(Microsoft Sentinel Automation, Cortex XSOAR, Splunk SOAR, Swimlane, etc.).

- Robust experience with

SIEM solutions

(Microsoft Sentinel, Splunk, QRadar, ArcSight, LogRhythm, etc.).

- Knowledge of security operations, incident response, threat intelligence, and log analysis.

- Scripting experience in

Python, PowerShell, or REST APIs for automation and integrations.

- Understanding of MITRE ATT&CK;, security frameworks, and cybersecurity best practices.

📌 SOAR Automation engineer (Chennai)
🏢 Hexaware Technologies
📍 Chennai