Cyber Security Engineer

We are looking for a skilled

SOAR Engineer with hands-on expertise in

Cortex XSOAR (Mandatory) to design, develop, and maintain security automation workflows. The ideal candidate will work closely with SOC, Incident Response, and Security Engineering teams to automate repetitive security operations, improve response times, and enhance operational efficiency.

Key Responsibilities :SOAR Development & Automatio

• nDesign, develop, and maintain automation playbooks in

Cortex XSOA R

• .Build and customize workflows for incident triage, enrichment, response, and remediation activities
• .Develop and maintain custom integrations using Python, PowerShell, and REST APIs

.Platform Integratio

• nIntegrate Cortex XSOAR with SIEM, EDR, Threat Intelligence, Email Security, IAM, and ITSM platforms
• .Support integrations with tools such as Splunk, QRadar, Microsoft Sentinel, CrowdStrike, ServiceNow, Palo Alto Networks, Proofpoint, and others
• .Troubleshoot integration issues and optimize platform performance

.Incident Response Suppor

• tCollaborate with SOC and Incident Response teams to automate use cases and security workflows
• .Assist in reducing alert fatigue through automated enrichment and response actions
• .Support incident investigations and playbook enhancements based on lessons learned

.Monitoring & Optimizatio

• nMonitor SOAR platform health, job executions, and workflow performance
• .Identify opportunities to improve operational efficiency through automation
• .Maintain playbook version control and testing processes

.Documentation & Knowledge Sharin

• gCreate and maintain technical documentation, integration guides, and operational runbooks
• .Provide training and technical guidance to SOC analysts and security engineers

. Preferred Skil

• lsExposure to Splunk Phantom, IBM SOAR, or other SOAR platform
• s.Experience with ServiceNow integration
• s.Knowledge of MITRE ATT&CK, Cyber Kill Chain, and threat intelligence framework
• s.Security certifications such as Security+, GCIH, PCSAE, or Cortex XSOAR certification s.