Security Automation Engineer

Position : Security Automation Engineer

Experience: 8 - 10 Years

Location: #Remote

Mode: #Contractual

Notice Period: #Immediate

Shift: Afternoon 2pm to 12am IST

Security Automation Engineer

Key Responsibilities:

• Design, develop, and maintain

  automation playbooks

  within #SOAR platforms (Palo Alto XSIAM, QRadar SOAR, etc.).
• Integrate multiple security tools ( #SIEM, #EDR, Firewalls, Email Security, Cloud Security, Threat Intel) with SOAR for automated incident handling.
• Collaborate with #SOC teams to

  automate repetitive tasks

  such as phishing response, malware triage, account lockouts, and threat containment.
• Create and maintain

  custom scripts

  (#Python, #PowerShell, Bash, etc.) to extend SOAR functionalities and integrate unsupported tools.
• Work closely with

  L1/L2 analysts

  to understand manual workflows and translate them into automated playbooks.
• Build and optimize

  detection logic, correlation rules, and incident enrichment pipelines

  across SIEM/SOAR platforms.
• Maintain and optimize integrations with security platforms such as

  #Proofpoint, #Okta, #SentinelOne, AWS Security Hub, Chronicle, and more.

• Provide documentation, knowledge transfer, and training

  on automation workflows to SOC teams.
• Ensure automation aligns with

  security best practices, compliance, and operational efficiency.

Required Skills & Experience:

• 4+ years of experience in

  Security Operations, Automation, or SOAR Engineering.

• Hands-on expertise with SOAR platforms

  such as Palo Alto XSIAM, QRadar SOAR, or similar.
• Experience with

  SIEM solutions

  (QRadar, #XSIAM, #Splunk, #Chronicle, etc.).
• Strong

  scripting/programming skills

  in Python (mandatory), PowerShell, Bash, or JavaScript.
• Proven ability to design and deploy

  custom integrations and APIs

  for automation workflows.
• Familiarity with

  incident response processes

  and SOC operations.
• Experience working with

  cloud security platforms (AWS, #Azure, #GCP)

  and #SaaS security integrations.
• Understanding of

  security domains

  such as phishing defense, malware analysis, threat intel, IAM, and vulnerability management.
• Strong troubleshooting skills and ability to work under pressure in fast-paced environments.

Preferred Qualifications:

• Palo Alto XSIAM or QRadar SOAR certification(s).
• Exposure to

  #DevSecOps practices and CI/CD automation pipelines.

• Experience in automating playbooks for phishing, malware, insider threat, and account takeover scenarios.

• Knowledge of containerization and orchestration tools (#Docker, Kubernetes).

• Familiarity with API development, REST, and JSON workflows.