FortiSOAR Specialist

Salt; Dubai; On-site; AED 90,000 - 140,000; Full time

Benefits offered by this job

Health insurance

Annual flight tickets to home country

Open door policy

Job summary

Salt is seeking a FortiSOAR Specialist to orchestrate incident response, automation, and playbook development for Help AG engagements, on-site and off-site. You will act as SME for Automation and Integration, collaborating with Cyber Engineering and Service Delivery teams to deliver outcomes.

You will design, deploy, and optimize FortiSOAR in customer environments, create connectors, integrate logging sources, and guide customers in SOAR best practices, supporting rapid detection and response

Qualifications

• Degree in computer science or related field.
• 5+ years experience with FortiSOAR is required.
• Experience developing FortiSOAR connectors and playbooks.
• Experience integrating technologies with SOAR.
• Exposure to SIEM systems (e.g., Splunk, Sentinel, QRadar).
• NSE 6 FortiSOAR Admin and NSE 7 FortiSOAR Design/Dev preferred.
• Strong scripting and integration skills (Python, GO, Kusto/KQL, PowerShell).

Responsibilities

• Integrate new logging sources and build playbooks to triage and respond to security incidents.
• Develop simple and complex playbooks and connectors with various technologies.
• Deploy, configure, manage, operate, and monitor FortiSOAR in SOC environments.
• Support customer security teams with SOAR best practices and design.
• Design and architect FortiSOAR deployments in customer environments.
• Create dashboards, reports, and incident war rooms; manage roaster and SLAs.
• Provide pre-sales and service transition support for FortiSOAR-based services.
• Collaborate with Cyber Engineering and Service Delivery teams to deliver outcomes.

Skills

FortiSOAR

Playbooks development

Automation and integration

Scripting (Python, PowerShell, GO, KQL

SIEM exposure

Cybersecurity incident response

On-site and off-site support

FortiSOAR connectors

FortiSOAR architecture design

Education

Degree in Computer science or related field

Tools

FortiSOAR

Splunk

QRadar

Securonix

NSE FortiSOAR certifications

Job description

We are looking for a talented and experienced FortiSOAR Specialist who will be responsible for orchestration and automation of incident response. This role directly supports Help AG customer engagements, working both off-site and on-site, leveraging FortiSOAR solution and their own knowledge of IT and security technologies to perform, guide and direct customers in the value and implementation of SOAR. This role is the primary technical and operational SME for Automation, Integration and Playbook development. This role works in conjunction with the Cyber Engineering, Cyber Defense, Platforms & Architecture and Service Delivery Governance teams to deliver successful outcomes as agreed between Help AG and its customers.

Responsibilities

• Integrate new logging sources and build playbooks to properly triage and respond to security incidents while reducing the time needed to analyze each event.
• Develop simple and complex playbooks and simple/custom connectors integrating with various technology.
• Deploy, configure, manage, operate, and monitor FortiSOAR in a SOC environment.
• Identify challenges of customer security teams, and assist security teams with SOAR best practices.
• Deploy and manage FortiSOAR VM – dedicated, On-prem and cloud (Multitenant).
• Design, develop and architect FortiSOAR in the customer environment.
• Setting up dashboard, reports, incident war room, and roaster management.
• Experience in defining Jinja filters, functions, and conditions.
• Support Pre-sales, Sales and Business development of new and existing services.
• Support the service transition process; Work with peers to effectively transition customers and infrastructure into operations.
• Work pro-actively and collaboratively with peers seeking mutually beneficial outcomes.
• Support rapid and effective detection, mitigation, containment and response to cyber security incidents leveraging integrations with, and capabilities of, infrastructure platforms, tools, assets under management and non-managed customer controls.
• Creation, optimization and documentation of processes, procedures and workflow; Tracking and reporting of SLAs, KPIs and OLAs.
• Initiate, support and manage incidents, problems, issues, risks and compliance activities; 24x7 on-call for critical or urgent activities as required.

Qualifications & Skills

• Degree in Computer science, information systems, electrical engineering or a closely related degree.
• Depth of skills in at least three of the following areas: Security controls operations, cyber incident response, cyber security detection, managed services integration, cyber threat intelligence, threat hunting.
• 5+ yrs experience in Fortinet FortiSOAR is a must.
• Experience in developing FortiSOAR connectors & playbooks.
• Experience in integrating various technologies with SOAR platform.
• Exposure to SIEM (Splunk, Sentinel, Qradar, Securonix) systems is strongly preferred.
• NSE 6 FortiSOAR Administrator and NSE 7 FortiSOAR Design and Development (Architect) certification is preferred.
• Experience in the design, implementation, maintenance and optimization of playbooks for detection, protection, containment and mitigation of cyber security related threats and incidents.
• Strong scripting and integration skills, in languages such as Python, GO, Kusto/KQL, PowerShell.
• Expert skills in information security technologies (e.g. SIEM, NGFW, CTI, WAF) as well as IT systems, including Office 365, service management tools, and the interfaces provided by IT & security systems that can be used for integration, automation and orchestration.
• Solid experience and understanding of Managed Security Service delivery, cyber security concepts and standards; Demonstrated experience in effectively managing and mitigating security events, threat, attacks and vulnerabilities.
• Working knowledge of cyber threats, threat actors, TTPs and how to mitigate threats in different contexts (on-prem, cloud, distributed).
• CISSP, CISM, CISA (or equivalent experience).
• ITIL accreditation (or relevant experience).
• Customer and team-focused attitude.
• Outstanding organizational skills; Ability to lead and motivate skilled security professionals.
• Solid background in cybersecurity and understanding of cyber security tools, infrastructure and systems.
• Active listener; Excellent communication, presentation and training skills.
• Ability to interface with, and influence, Pre-Sales and sales teams, to achieve agreed business outcomes.
• Flexible work approach, based on the job requirements.
• Strong interpersonal skills with the ability to collaborate well with others and reconcile differences among resources/departments.
• Understanding of classic and emerging threat actor tactics, techniques and procedures in both pre and post-exploitation phases of attack lifecycles.

Benefits

• Health insurance with one of the leading global providers for medical insurance.
• Career progression and growth through challenging projects and work.
• Employee engagement and wellness campaigns activities throughout the year.
• Excellent learning and development opportunities.
• Annual flight tickets to home country.
• Inclusive and diverse working environment.
• Flexible/Hybrid working environment.
• Open door policy.