21 Oct
|
Embarkgcc Services
|
Mumbai
21 Oct
Embarkgcc Services
Mumbai
XSOAR Engineer Consultant / Assistant Manager
Experience: 110 years
Locations: Mumbai / Hyderabad
Role Overview
We are looking for skilled XSOAR Engineers with experience in security automation, SOAR playbook development, and incident response automation. The ideal candidates will have hands-on experience with Palo Alto Cortex XSOAR/XSIAM or other SOAR platforms, along with scripting and security tool integration capabilities.
Key Responsibilities
- Develop, maintain, and optimize automated playbooks within SOAR platforms to streamline security operations and incident response.
- Automate incident detection, triage, investigation, escalation, and remediation workflows.
- Integrate SOAR playbooks with SIEMs, firewalls, endpoint protection tools, threat intelligence platforms, and ticketing systems.
- Develop and maintain automation scripts using Python, JavaScript, PowerShell, or similar scripting languages.
- Configure and optimize SOAR platforms, troubleshoot playbook failures, perform root cause analysis, and improve automation performance.
- Collaborate with SOC analysts, security engineers, and incident response teams to identify automation opportunities and implement security use cases.
- Integrate threat intelligence feeds and automate indicators of compromise (IOC) enrichment.
- Test and validate playbooks, troubleshoot integration issues, and ensure reliable execution.
- Document playbook workflows, integrations, standard operating procedures, and automation processes.
- Support SIEM content management activities, including security monitoring use cases, detection content, and threat detection optimization, where applicable.
Required Skills
- Hands-on experience with SOAR platforms, preferably Palo Alto Cortex XSOAR/XSIAM.
- Solid experience in SOAR playbook development and security process automation.
- Knowledge of incident response, threat intelligence, network security, and vulnerability management.
- Experience integrating security tools through APIs and platform connectors.
- Scripting knowledge in Python, JavaScript, PowerShell, or similar languages.
- Ability to troubleshoot automation workflows and perform root cause analysis.
- Understanding of SOC operations, security incident handling, and threat detection.
- Strong problem-solving, documentation, and collaboration skills.
Education
Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Security, Information Technology, or a related field.
📌 XSOAR Engineer - Consultant / Assistant Manager (Mumbai)
🏢 Embarkgcc Services
📍 Mumbai