Security Automation Professional

• Design, develop, and implement

  SOAR playbooks

  and automation workflows to streamline incident response and security operations.
• Integrate

  SOAR platforms

  with various security tools (SIEM, EDR, Threat Intelligence, Ticketing Systems, etc.).
• Develop and maintain

  Python scripts

  to automate manual security processes and enhance operational efficiency.
• Collaborate with SOC, Threat Intelligence, and Incident Response teams to understand use cases and build automation accordingly.
• Perform

  data discovery and classification

  to identify and secure sensitive information across the environment.
• Monitor and optimize existing automations to ensure reliability, scalability, and performance.
• Participate in incident triage and response by leveraging automation and orchestration tools.
• Prepare detailed documentation of playbooks, scripts, and automation workflows.
• Contribute to continuous improvement by identifying new automation opportunities within the security ecosystem.

Required Skills and Experience:

• 5+ years

  of hands-on experience in

  Security Operations, Incident Response, or Security Automation.

• Strong expertise in

  SOAR platforms

  such as Splunk SOAR (Phantom), Palo Alto Cortex XSOAR, or IBM Resilient.
• Proficiency in

  Python scripting

  for automation and integration purposes.
• Experience in

  data discovery, data classification, and data protection

  methodologies.
• Solid understanding of

  incident response

  processes, security event triage, and threat analysis.
• Experience working with

  SIEM tools (e.g., Splunk, QRadar, ArcSight, Sentinel)

  and integrating them with SOAR.
• Knowledge of

  REST APIs, JSON, and scripting integrations

  for security tools.
• Strong analytical and problem-solving skills with attention to detail.
• Excellent communication and documentation skills.