Security Engineer (Security Automation & Incident Response)

Description:

Client is looking for a skilled and versatile Security Engineer (NOT Analyst) to drive the advancement and growth of our detection and automation initiatives. Reporting to the Senior Manager of Security Engineering and Operations, this role will collaborate with cross-functional teams and external partners to mitigate risks and implement security measures that safeguard sensitive data and systems against infiltration and cyber-attacks. The position will also lead our incident response efforts and the development of threat detection platforms.

Must Have Skills to Qualify (Atleast 5+ Years):

• Building automation workflows from scratch

• Owning SOAR playbook architecture

• Hands-on Python scripting for integrations

• Deploying detection logic across hybrid environments

• Has managed and maintained CASB, EDR, and or an Email Security platform.

• Developed and enforced security policies across corporate security tools.

• Designed and built automation workflows in our SOAR platform.

• Create and maintain custom integrations and scripts using Python.

• Troubleshoot and resolve issues across security tools and automation pipelines.

• Is knowledgeable in at least one cloud environment.

• Knows Terraform or any Infrastructure as Code

Responsibilities:

● Lead the development, research, and creation of automations within our SOAR platform.

● Design and develop automation playbooks using both out-of-the-box and custom integrations and functions.

● Create custom integrations and automation scripts using languages like Python or PowerShell.

● Integrate existing technologies with the XSOAR platform.

● Participate in architecture design and analysis related to security automation.

● Troubleshoot and resolve issues related to automation processes or tools.

● Collaborate with teams such as network engineering and downstream applications to ensure seamless integration of automation solutions.

● Catalogue and review identified security automation use cases with stakeholders.

● Lead automation use case/playbook design sessions.

● Develop and maintain documentation for automation processes and procedures.

Your team will:

● Execute Client’s security strategy and roadmap.

● Refine security response by implementing orchestration and automation.

● Innovate new methods and processes that will improve Client’s security posture.