59 Soar Automation Jobs

L1 SOAR Automation Engineer Experience: 36 years Number of Positions-1 Role Summary: Supports the development, configuration, and maintenance of SOAR playbooks and integrations to automate routine SOC workflows. Key Responsibilities: Configure basic SOAR playbooks for standard use cases (phishing triage, IP/domain enrichment, ticket updates). Maintain and test integrations between SOAR and SIEM, EDR , ticketing, and communication tools. Implement small changes or enhancements to existing playbooks based on SOC feedback. Monitor execution of playbooks, troubleshoot failures, and ensure runbooks are updated. Document workflows, parameters, and approvals for each automation. Work with L2/L3 and...

The SOC L3 Manager is responsible for managing the Security Operations Center (SOC) at the highest level. This role involves overseeing daily operations, managing escalations, and ensuring timely detection, analysis, and response to cybersecurity incidents. The SOC L3 Manager will provide strategic direction, mentor SOC analysts, and strengthen the organizations security posture. Device Integration :100 % Device integration with SIEM & Rule configuration for the same. Incident Investigation & Response SIEM Tuning & Use-Case Enhancement Threat Hunting Threat Intelligence Correlation Incident Coordination & Escalation Tool & Technology Optimization Reporting & Documentation Mentoring & Technic...

JOB SUMMARY We are seeking a highly skilled and motivated Manager to join the Security Engineering and Automation team in India. The Manager will help lead a team of security engineers focused on various security functions including but not limited to cloud security, security orchestration, automation and response (SOAR) and identity and access management (IAM). The Manager will be responsible for leading the India Security Engineering and Automation team to deliver timely, high-quality results that support key program activities. ESSENTIAL DUTIES/RESPONSIBILITIES Leadership and Management: Lead and manage a team of security engineers based in Hyderabad, including individuals focused on vari...

About the Organisation DataFlow Group is a pioneering global provider of specialized Primary Source Verification (PSV) solutions, and background screening and immigration compliance services that assist public and private organizations in mitigating risks to make informed, cost-effective decisions regarding their Applicants and Registrants. About the Role: Dataflow is looking to hire a cyber security expert with rich experience leveraging TrendMicro Vision/XDR platform and AWS environment in security alerts triage, investigation and incident response to support on-prem devices and cloud assets remain protected from any security threats. The ideal candidate will have a strong understanding of...

SOAR Engineer Roles & Responsibilities: Minimum 3 years of experience 2+ experience in Security Automation and Orchestration tools PAN XSOAR, IBM Resilient, Siemplify, Sentinel LogicApps, SNOW Secops etc 2+ years of experience with Python, especially in a security environment. (Knowledge of PowerShell, Golang or Java would also be helpful) 1+ years of experience with API integration and development Experience in a Security Operations Center (SOC) is a plus CISSP, Security+, and other certifications are a plus AGILE Certification are a plus Bachelors degree in a computer system or science discipline from an accredited college or university or any equivalent combination of education, experienc...

Hi Aspirant, We are looking for L3 Sumo Logic Engineer Job Position: L3 Sumo Logic Engineer Experience Required: 5+ Years. Location: Hyderabad Technical Skill Requirements: SRE, Sumo Logic, Python/Bash, AWS/GCP/Azure,SOAR, Role and Responsibilities Manage, configure, and optimize the Sumo Logic platform Design and implement observability and tracing for applications and infrastructure Configure Cloud SIEM, UEBA, and automation workflows Troubleshoot complex incidents and resolve or escalate as needed Mentor L1/L2 engineers and provide technical guidance Ensure compliance with PCI, HIPAA, SOC2, ISO 27001 standards Integrate Sumo Logic with third-party tools and cloud environments Lead cross-f...

Role & responsibilities - Minimum 4 plus years of experience in application development using Python and Rest API. - Experience in managing any SOAR platforms (e.g. Palo Alto Cortex, Phantom, Resilient, Swimlane, etc.) -Experience in SOAR administration, playbook development/automation and life cycle management - Deploying and managing integration packages for various 3rd party tools/applications - Experience in trouble shooting integration issues and code customization. - Experience in developing integration solutions with web services, APIs using REST/JSON. - Ability to install and configure 3rd party applications in a Linux environment, experience in Unix/Linux administration - Understand...

Position Title- Senior Security Engineer- SOAR Author, test, and maintain automation scripts/workflows within SOAR platform Integrate SOAR platform with other security tools and APIs to execute automated workflows Automate Security Incident Response processes by providing the ability to analyze and resolve alerts from security tools Develop custom scripts and integrations using Python/PowerShell for automation and orchestration. Maintain knowledge and understanding of current and emerging SIEM practices and standards Build analysis and correlation logic to enable security threat hunting and investigation practices Support SIEM operations by writing/testing complex correlation rules and handl...

____________________________________________________________________________ - PLEASE SAVE WHATSAPP # +91 98114 11414 (Ashima)/ 9315248639 (Nishant) - Ashima/ Nishant/Shreedevi is your POC from RexOreo Pvt Ltd. -Queries : All emails will come from id : team@rexoreo.com , so please keep an eye. _____________________________________________________________________________ Top Selection & Auto Elimination Criteria: Only Immediate joiners (0-30 days) Candidates Exprienced & Expert in ALL skills mentioned in " Must-Have Technical Skills " below in JD Need to apply Mode : 4 days work from Office , 1 day WFH Relevant experiense range 10+ Years Position : L3 /L4 SOC Architect / Sr. SIEM Engineer Exp...

We seek a Cloud Engineer Senior-Level (Senior) who shares our passion for innovation and change. This role is critical to helping our business partners evolve and adapt to consumers personalized expectations in this new technological era. What will help you succeed: Fluent English (B2 - Upper Intermediate) GCP Cloud SecOps Terraform CICD Threat Detection, SIEM, SOAR Automation

About the Role: We are seeking a skilled and innovative Security Automation Engineer to design, develop, and maintain automated solutions that strengthen our security posture, improve operational efficiency, and accelerate threat detection and response. Key Responsibilities: Security Automation & Orchestration Design, implement, and manage security automation workflows using SOAR (Security Orchestration, Automation, and Response) platforms (e.g., Splunk SOAR, Cortex XSOAR, Swimlane, Tines). Develop custom scripts and integrations to automate repetitive security tasks such as incident triage, enrichment, containment, and remediation. Build API-based integrations across diverse security and IT...

___________________________________________________________________________ - PLEASE SAVE WHATSAPP # +91 98114 11414 (Ashima)/ 9315248639 (Nishant) - Ashima/ Nishant/Shreedevi is your POC from RexOreo Pvt Ltd. -Queries : All emails will come from id : team@rexoreo.com , so please keep an eye. _____________________________________________________________________________ Top Selection & Auto Elimination Criteria: Only Immediate joiners (0-30 days) Candidates Exprienced & Expert in ALL skills mentioned in " Must-Have Technical Skills " below in JD Need to apply Mode : 4 days work from Office , 1 day WFH Relevant experiense range 10+ Years Position : L3 /L4 SOC Architect / Sr. SIEM Engineer Expe...

Job Title: SOC Engineering - Product & Automation Job Description We are looking for a SOC Product & Automation Engineer to join our CDOC Engineering team. The role will focus on SIEM engineering and SOAR automation, with hands-on expertise in Palo Alto XSIAM and XSOAR. You'll design and optimize automation playbooks, build SIEM detections, and work closely with MSS SOC and clients to deliver scalable, efficient security operations. Job Title: SOC Product & Automation Engineer Location: On-site - Gurgaon, Cyber City Experience Required: 4-5 years Department: CDOC Engineering Role Overview We are seeking a skilled SOC Product & Automation Engineer with 4-5 years of experience in SIEM engineer...

Role Overview: You will be joining the Expedia Group Security Engineering & Technology team as a Security Engineer, where you will be responsible for designing, implementing, and deploying innovative security solutions. Your role will involve maintaining, monitoring, and improving systems and security posture, automating workflows, leading solutions development, and collaborating with cross-functional teams to solve complex problems. Key Responsibilities: - Design, implementation, and Deployment of innovative security solutions - Proactively maintain, monitor, and improve systems and security posture with a focus on service excellence - Automating workflows to reduce time to resolve or time ...

About the Role: We are looking for a skilled Security Automation Engineer to design, develop, and implement automated security solutions that enhance our organizations security posture. You will collaborate with security operations, development, and infrastructure teams to automate threat detection, incident response, vulnerability management, and compliance processes. Your work will help reduce manual efforts, improve response times, and ensure consistent security enforcement. Key Responsibilities: Design, develop, and maintain security automation workflows and playbooks using scripting and automation tools. Integrate security tools (SIEM, SOAR, IDS/IPS, endpoint security) into automated de...

Job Description The Opportunity Based in Hyderabad, join a global healthcare biopharma company and be part of a 130- year legacy of success backed by ethical integrity, forward momentum, and an inspiring mission to achieve new milestones in global healthcare. Be part of an organisation driven by digital technology and data-backed approaches that support a diversified portfolio of prescription medicines, vaccines, and animal health products. Drive innovation and execution excellence. Be a part of a team with passion for using data, analytics, and insights to drive decision-making, and which creates custom software, allowing us to tackle some of the world's greatest health threats. Our Technol...

Bloom Energy, a solid oxide fuel cell company, is currently expanding its cybersecurity incident monitoring and response team and is looking for Security Operations Center (SoC) Analysts. The person working in the SOC team operates the security monitoring solutions, reacting timely to security events as identified. This individual should be a dynamic professional who is looking for a rewarding future in one of todays most exciting security technologies Roles: As our Security Engineer and SOC Operations Analyst, you will be part of a SOC team and cover broad aspects of Bloom Energy Security Engineering, Cyber Security monitoring and incident response operations. Working closely with SOC Manag...

About The Role Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : Security Information and Event Management (SIEM) Good to have skills : NA Minimum 5 year(s) of experience is required Educational Qualification : 15 years full time education Summary :As a Security Architect, you will define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Your typical day will involve col...

Key Responsibilities 1. Security Operations & Monitoring Manage and monitor Endpoint security, EDR (Crowdstrike), SIEM, and SOAR platforms for threat detection, correlation, and automated response. Create and design Rule , Policies and Paybooks, manage SoC operation Conduct threat hunting exercises using MITRE ATT&CK framework and CVE intelligence. Manage and monitor Data Loss Prevention (DLP) solutions, endpoint protection, and log monitoring tools. Analyze suspicious activity, perform incident response, root cause analysis, and prepare post-incident reports. 2. Vulnerability & Risk Management Perform Vulnerability Assessment and Penetration Testing (VAPT) on applications, networks, and inf...

Role & responsibilities Should have minimum 4+ years of experience in managing and operating Palo Alto XSIAM Log Source Onboarding : Onboard and troubleshoot log sources (on-premises and cloud) to the XSIAM platform using syslog, APIs, and other mechanisms. Ensure data integrity, reliability, and proper formatting. Log Management: Hands-on experience with log collection, parsing, and analysis from various sources (e.g., firewalls, endpoints, cloud environments). Strong defensive mindset with understanding of security events of interest for building detection rules Good in query languages like XQL . Advanced threat intelligence with the help of XQL. Should have advanced knowledge on use case ...

____________________________________________________________________________ - PLEASE SAVE WHATSAPP # +91 98114 11414 (Ashima)/ 9315248639 (Nishant) - Ashima/ Nishant/Shreedevi is your POC from RexOreo Pvt Ltd. -Queries : All emails will come from id : team@rexoreo.com , so please keep an eye. _____________________________________________________________________________ Top Selection & Auto Elimination Criteria: Only Delhi NCR Candidates Need to apply as we need Only Immediate joiners (0-30 days) Rotational Shift Cab facility : Yes only late night pick or drop(1 side only for Gurgaon Employees) Location : Gurgaon Mode : 5 days work from Office only Relevant experience range 9+ Position : L3 ...

How you'll make an impact Experience of implementation and development of SOAR solutions like Swimlane, Cortex XSOAR, Tines, devo, Exabeam SOAR, Splunk SOAR etc The primary purpose of this role is to act as the orchestration strategist in identifying incident response activity where mitigating controls would be automated. This is accomplished in a four pronged approach: Identify mitigating controls through repetitive manual processes within the SOC Analyst community that complies with client security policy and industry best practices In concert with Data Scientists, within the "Proactive Hunting" process, translate complex, and non-complex Incident Response event patterns into an automated ...

Senior SOAR Developer Location : Hyderabad Position Summary We are seeking a highly skilled and experienced Senior SOAR Developer to join our cybersecurity team. This role is crucial for advancing our security posture through the development and maintenance of automated security workflows and playbooks. The ideal candidate will have extensive experience with SOAR platforms, a deep understanding of the security domain, and expert-level proficiency in Python. This is a technical leadership role that requires both hands-on development and the ability to mentor and collaborate with other security professionals. Key Responsibilities SOAR Development & Engineering : Design, develop, and maintain a...

* Responsible for implementation partner to see project on track along with providing required reports to management and client * Handle the project as well as BAU operations while ensuring high level of systems security compliance * Coordinate with and act as an authority to resolve incidents by working with other information security specialists to correlate threat assessment data. * Analyse data, such as logs or packets captures, from various sources within the enterprise and draw conclusions regarding past and future security incidents. * Ready to support for 24/7 environment. Required education Bachelor's Degree Preferred education Master's Degree Required technical and professional exp...

WHO WE ARE: Zinnia is the leading technology platform for accelerating life and annuities growth. With innovative enterprise solutions and data insights, Zinnia simplifies the experience of buying, selling, and administering insurance products. All of which enables more people to protect their financial futures. Our success is driven by a commitment to three core values: be bold, team up, deliver value and that we do. Zinnia has over $180 billion in assets under administration, serves 100+ carrier clients, 2500 distributors and partners, and over 2 million policyholders. WHO YOU ARE: As a Senior Cloud Security Engineer , you will leverage your development, security and architecture experienc...