Professional Services Consultant - SOAR

About Trantor:

Trantor is a technology services company focused on outsourced product development and digital re-engineering. Leveraging our CaptiveCoE engagement model, we operate as a seamless extension of our client s teams to provide rapid scalability with predictable budgets. Founded in 2012, Trantor has worked with customers across Tech, FinTech, Media & Cybersecurity industries. We have centers in the US, India, Canada, and Costa Rica. We are consistently rated as the #1 employer in the region with the ability to attract and retain technical talent. Our commitment to excellence and impactful results has translated to long-term relationships and value for our clients and solution partners.

A senior consultant specializing in the XSOAR platform, this role will encompass all the responsibilities of a Professional Services Consultant while expanding into more advanced and strategic areas. Senior consultants focus on highly customized projects, demonstrate greater independence, and contribute to building and designing service offerings around the XSOAR platform. Their extensive knowledge of scripting, APIs, security use cases, system administration, combined with their ability to provide innovative solutions, will be instrumental in driving success for our clients.

Job Role & Responsibilities

• Lead and execute complex deployment projects involving XSOAR
• Collaborate closely with clients to understand their unique security challenges and develop customized playbooks and automation workflows to address their specific requirements.
• Serve as a SME for XSOAR, providing guidance and thought leadership to customers and internal teams.
• Independently troubleshoot technical issues, identify root causes, and develop creative solutions to overcome challenges.
• Contribute to the development of service offerings around XSOAR, including methodologies, playbooks, and best practices.
• Leverage your in-depth knowledge of SIEM and SOAR and SOC practices to assess customer needs, provide tailored recommendations, and assist in the formulation of effective security strategies
• Collaborate closely with customers to understand their unique challenges and objectives, translating them into actionable steps that enhance their security posture
• Identify opportunities to enhance analyst alert handling through automation
• Produce technical documentation detailing SIEM and SOAR aspects of the engagement
• The candidate is expected to comply with the companys policies and procedures.

Required Skills

• 6-10 years of hands-on experience in deploying and integrating SIEM and SOAR solutions within enterprise to large enterprise-level environments
• Extensive experience in deploying and managing XSOAR, with a deep understanding of its architecture, components, and capabilities.
• Proficiency in Python and/or JavaScript to develop advanced custom integrations, automations and playbooks.
• Advanced knowledge of APIs and the ability to integrate XSOAR with diverse security tools and infrastructure components.
• In-depth knowledge of cloud platforms (e. g. , AWS, Azure, GCP) and their security services.
• Expertise in incident response processes, including triage, investigation, and remediation.

• Should have a clear understanding of the MITRE framework and how to operationalize the same across multiple functions.
• Expertise in designing and implementing complex security use cases and streamline security operations.
• Strong understanding of security concepts, frameworks, and compliance standards, with the ability to provide strategic guidance and recommendations.

• Familiarity with a range of SIEM and SOAR technologies, such as Splunk, QRadar Arcsight, Demisto etc.
• Proven experience in providing consultative services to end customers within the realm of cybersecurity, particularly in SIEM/SOAR and SOC domains
• Demonstrated ability to comprehend customer requirements, analyze complex security environments, and deliver strategic recommendations that align with their goals
• Understanding of Security Analysis & Response, encompassing endpoint, network, and cloud-based environments is a plus
• Proficient in comprehending and creating technical design documentation
• Extensive experience with Security Operations Centers (SOC) tooling and processes
• Industry-recognized qualifications (CISSP, GIAC, SIEM/SOAR Vendor Qualification, etc. ), will be a plus