Senior SOC Automation Engineer - SOAR & Cloud

CPX; Abu Dhabi; On-site; AED 223,000 - 234,000; Full time

Job summary

CPX is seeking an experienced SOC SOAR engineer to manage and enhance our security orchestration, automation, and response capabilities. You will work hands-on with Splunk SOAR, FortiSOAR, or Cortex XSOAR, onboard new log sources, and integrate with SIEM and threat intel to strengthen incident response.

The role requires at least 5 years in SOC operations with hands-on SOAR management, strong cloud and network knowledge, and ability to design effective playbooks in a fast-paced environment.

Qualifications

• 5+ years in SOC operations with SOAR management.
• Experience onboarding log sources and integrations.
• Understanding of MITRE ATT&CK framework.
• Strong cloud and network knowledge for log onboarding.
• Ability to design and maintain SOAR playbooks.

Responsibilities

• Manage and maintain SOAR services within the SOC environment.
• Hands-on experience with Splunk SOAR, FortiSOAR, or Cortex XSOAR.
• Onboard new log sources and integrations with SOC and stakeholders.
• Ensure proper functionality and integration of log sources with SIEM/SOAR.
• Design and implement SOAR playbooks and workflows for automation and incident response.
• Integrate SOAR with SIEM, threat intel, ticketing systems and other security tools.
• Work with SOC analysts to streamline triage, investigation, and remediation processes.
• Maintain and update SOAR components; monitor performance and troubleshoot issues.
• Develop custom scripts and connectors to enhance automation capabilities.
• Refine playbooks based on evolving threats and feedback.
• Document workflows, integrations, and procedures.
• Ensure compliance with internal policies and regulatory requirements.
• Support process improvements to increase SOC efficiency.

Skills

Splunk SOAR

FortiSOAR

Cortex XSOAR

Python scripting

Cloud certifications

CISSP

SOAR automation

SOC operations

SOC experience

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

FortiSOAR

Splunk SOAR

Cortex XSOAR

Job description

CPX is seeking an experienced SOC SOAR engineer to manage and enhance our security orchestration, automation, and response capabilities. You will work hands-on with Splunk SOAR, FortiSOAR, or Cortex XSOAR, onboard new log sources, and integrate with SIEM and threat intel to strengthen incident response.

The role requires at least 5 years in SOC operations with hands-on SOAR management, strong cloud and network knowledge, and ability to design effective playbooks in a fast-paced environment.