Job Description

Working knowledge of Python, JSON, and familiarity with Rest API Integration is required. The candidate should have experience with the management of information security tools such as SIEMs, SOAR, TIP, EDR, IPS, Sandboxes, Vulnerability Management, etc. Good understanding of SOC/security management workflows in enterprise organizations. Experience as a Security Incident Responder or SOC analyst/manager. Experience with cloud and on-premise deployments, automation deployment technologies like Ansible, Docker. Strong Application / Operating System / Networking troubleshooting skills. Good Analytical development skills. OS expertise (Linux, RHEL, CentOS) Excellent oral and written communication skills. Responsibility Understand the deployed products at the customer end and driving automation with them for the defined scope. Develop security integrations which supports common use cases in information security management. Product Deployment - Assist customers through an organized go-live process and deploy our solutions meeting customer requirements and delivery timeline. Product Updates - Coordinate with our Engineering team on new product version upgrades and applying hotfixes/security patches. Understand the deployed products at the customer end and driving automation with them for the defined scope. Write and review security automation and designs. Work with customers to understand their specific security workflows. Coordination and collaboration - Work with customer s Security Operations, Threat Intelligence, and Incident Response teams on developing and managing the needed orchestrations and automation workflows and playbooks. Assist with all phases of the SOAR solution, inclusive of planning, testing, selection, and implementation.