Role & responsibilities

- Design, develop, and maintain Cortex XSOAR playbooks and workflows.

- Create custom automations and integrations using Python and REST APIs.

- Integrate security tools such as:

- SIEM (Splunk, QRadar, Sentinel)

- EDR (CrowdStrike, Microsoft Defender, Cortex XDR)

- Firewalls (Palo Alto, Fortinet, Check Point)

- ITSM tools (ServiceNow, Jira)

- Threat Intelligence Platforms
- Automate incident triage, enrichment, containment, and remediation activities.

- Develop custom scripts using Python within Cortex XSOAR.

- Troubleshoot and optimize existing playbooks and integrations.

- Support SOC operations and incident response processes.

- Manage threat intelligence feeds and indicator enrichment workflows.

- Create dashboards, reports, and operational metrics.

- Perform UAT, deployment, and documentation of SOAR solutions.

- Participate in security incident investigations and automation enhancement initiatives.

📌 SOC Analyst (Cortex XSOAR) (Chennai)
🏢 Bahwan Cybertek
📍 Chennai