Automation Engineer m/f/d

CANCOM SE; Köln; Vor Ort; EUR 65.000 - 95.000; Vollzeit

Zusammenfassung

CANCOM SE seeks an experienced XSOAR/SOAR engineer to develop and maintain playbooks, automations, dashboards, reports, and API integrations within our SOC. You will optimize workflows, ensure scalability, and drive efficiency across incident response processes.

Work with SOC teams to identify automation opportunities, manage feature backlogs, and document technical implementations for knowledge sharing and maintainability.

Qualifikationen

• Experience developing SOAR content, including playbooks.
• Ability to build automations, dashboards, and reports.
• Experience with API integrations in security platforms.

Aufgaben

• Develop, maintain, and enhance SOAR content, including custom playbooks, automations, dashboards, reports, and API integrations
• Optimise and automate SOC workflows to reduce incident response times and improve operational efficiency
• Work within the existing playbook framework while ensuring scalability, agility, and efficiency
• Continuously refine incident response processes by leveraging XSOAR capabilities within the current security environment
• Prioritise and manage a backlog of XSOAR feature requests, enhancements, and issue resolution
• Collaborate with the SOC teams and other stakeholders to identify opportunities for automation and process improvements
• Document workflows, processes, and technical implementations to ensure knowledge sharing and maintainability
• Ensure integrations with external security tools SIEMs, EDRs, Threat Intelligence platforms, etc. function effectively and meet operational needs
• Provide troubleshooting and support for XSOAR-related issues, ensuring minimal disruption to SOC operations

Jobbeschreibung

• Develop, maintain, and enhance SOAR content, including custom playbooks, automations, dashboards, reports, and API integrations
• Optimise and automate SOC workflows to reduce incident response times and improve operational efficiency
• Work within the existing playbook framework while ensuring scalability, agility, and efficiency
• Continuously refine incident response processes by leveraging XSOAR capabilities within the current security environment
• Prioritise and manage a backlog of XSOAR feature requests, enhancements, and issue resolution
• Collaborate with the SOC teams and other stakeholders to identify opportunities for automation and process improvements
• Document workflows, processes, and technical implementations to ensure knowledge sharing and maintainability
• Ensure integrations with external security tools SIEMs, EDRs, Threat Intelligence platforms, etc. function effectively and meet operational needs
• Provide troubleshooting and support for XSOAR-related issues, ensuring minimal disruption to SOC operations