SecOps Engineer

Greetings from SwaaS

Location: Guindy,Chennai

Work Timings: 12pm to 9pm

Mode: Work from Office

About the Role

Security Incident & Response Automation Process Engineer

Roles & Responsibilities

• Architect, develop, and maintain advanced SOAR workflows for detection, triage, containment, and remediation.
  
• Integrate and orchestrate tools across the security stack (SIEM, EDR, TI, IAM, DLP, etc.) to enable end-to-end automation.
  
• Create and evolve dynamic playbooks aligned with MITRE ATT&CK, NIST IR, and organizational threat models.
  
• Conduct post-incident reviews (PIRs) and ensure continuous improvements in processes and tools.
  
• Mentor and guide L1/L2 SOC analysts, providing leadership during escalations and incident handling.
  
• Collaborate with internal and external stakeholders to strengthen detection and response capabilities.
  
• Ensure documentation and knowledge sharing across teams to support resilience and rapid response.
  

Requirements

• Deep expertise with SOAR platforms (Cortex XSOAR, Splunk SOAR, IBM Resilient, etc.).
  
• Strong scripting skills (Python mandatory).
  
• In-depth knowledge of SIEM tools (Splunk, QRadar, Sentinel), endpoint/network forensics, and threat intel integration.
  
• Advanced understanding of threat landscapes, APT tactics, malware behavior, and IR methodologies.
  
• Proven experience in integrating RESTful APIs, webhooks, and custom connectors between security tools.
  
• Strong collaboration, problem-solving, and communication skills.