Experience: 8-12 years

Work location: Chennai

Roles and responsibilities:

- Design, develop, and maintain SOAR playbooks for automated incident response and security operations workflows.
- Integrate security tools such as EDR, email security, threat intelligence, ticketing, and IAM platforms with SOAR solutions.
- Manage and optimize SIEM use cases, correlation rules, alerts, dashboards, and reporting.
- Analyze security events, investigate incidents, and improve detection capabilities.
- Develop automation workflows to reduce manual effort and improve SOC efficiency.
- Collaborate with SOC, Threat Hunting, and Incident Response teams to enhance security operations.

Required Skills:

- Hands-on experience with SOAR platforms (Microsoft Sentinel Automation, Cortex XSOAR, Splunk SOAR, Swimlane, etc.).
- Solid experience with SIEM solutions (Microsoft Sentinel, Splunk, QRadar, ArcSight, LogRhythm, etc.).
- Knowledge of security operations, incident response, threat intelligence, and log analysis.
- Scripting experience in Python, PowerShell, or REST APIs for automation and integrations.
- Understanding of MITRE ATT&CK;, security frameworks, and cybersecurity best practices.

📌 SOAR Automation engineer (Chennai)
🏢 Hexaware Technologies
📍 Chennai