Description

Design, develop, and maintain SOAR playbooks and automation workflows to accelerate SOC incident response.

This role is on-site.

Responsibilities

• Build scalable security orchestration workflows for alert triage, automated enrichment, and incident response.
• Implement and maintain integrations between SOAR platforms and security technologies using APIs and webhooks.
• Develop automation logic to improve SOC efficiency and reduce Mean Time to Respond and Resolve.
• Support SOAR platform lifecycle management, including upgrades, change management, and governance.
• Maintain technical documentation, workflow diagrams, and operational runbooks.

Required Skills

• 5+ years of hands-on experience in cybersecurity automation and SOAR platform engineering.
• Strong knowledge of Microsoft Defender Suite, Microsoft Sentinel, and CrowdStrike Falcon.
• Proven ability to design automation workflows for SOC operations.
• Experience with API integration, REST APIs, and webhook implementation.
• Familiarity with SIEM platforms and SOC operational processes.
• Ability to collaborate with SOC teams to identify automation opportunities.

Preferred Skills

• Experience with Microsoft Purview, Entra ID, and Graph API.
• Python scripting and custom connector development.
• Knowledge of AI-driven security operations and identity protection platforms.

Key Skills

Education

Any Graduate