Assistant Manager

WSNE Consulting Pvt. Ltd.; Mumbai; On-site; INR 1,400,000 - 1,800,000; Full time

Job summary

WSNE Consulting Pvt. Ltd. is seeking a security automation engineer to develop, maintain, and optimize automated SOAR playbooks for incident response in a Mumbai-based team.

The role focuses on designing workflows for detection, triage, investigation, enrichment, and remediation, while integrating Cortex XSOAR/XSIAM with SIEM, EDR, and ticketing systems. The candidate will develop custom SIEM content, test and troubleshoot playbooks, and perform root cause analyses to ensure secure, scalable

Qualifications

• Develop, maintain, and enhance automated SOAR playbooks for security incident response.
• Design automation workflows for detection, triage, investigation, enrichment, and remediation.
• Configure and optimize Cortex XSOAR/XSIAM or other SOAR platforms.
• Integrate SOAR with SIEM, EDR, firewalls, and ticketing systems.
• Develop and manage custom SIEM content, including detection rules and correlations.
• Test, troubleshoot, and optimize playbooks and integrations for performance.
• Perform root cause analysis and resolve automation issues.
• Collaborate with SOC analysts, incident responders, and IT teams to identify automation opportunities.
• Support threat detection, incident response, threat intelligence, and vulnerability management activities.
• Develop automation scripts using Python, JavaScript, PowerShell, or similar languages.
• Document playbook logic, workflows, configurations, and SOPs.
• Continuously enhance automation processes based on incidents and feedback.
• Assist in evaluating and implementing SOAR technologies based on requirements.
• Ensure automation workflows align with security processes and objectives.

Responsibilities

• Develop, maintain, and enhance automated SOAR playbooks.
• Design automation workflows for incident detection, triage, and remediation.
• Configure and optimize SOAR platforms to improve efficiency.
• Integrate playbooks with SIEM, EDR, and ticketing systems.
• Develop and manage custom SIEM content.
• Test and troubleshoot playbooks and integrations.
• Perform root cause analysis and resolve issues.
• Collaborate with SOC analysts and IT teams to identify automation opportunities.
• Support threat detection and incident response activities.
• Document playbook logic and configurations.
• Continuously enhance automation processes.

Skills

SOAR playbooks

Cortex XSOAR/XSIAM

Automation workflows

Python

JavaScript

PowerShell

SIEM

EDR

Threat intelligence platforms

Endpoint protection tools

Ticketing systems

Incident response automation

Security operations

Tools

Cortex XSOAR

SOAR platforms

SIEM

EDR

Job description

Roles & Responsibilities

• Develop, maintain, and enhance automated SOAR playbooks to streamline and improve security incident response workflows.


• Design and implement automation workflows for incident detection, triage, investigation, enrichment, and remediation.


• Configure and optimize Cortex XSOAR/XSIAM or other SOAR platforms to improve security operations efficiency.


• Integrate SOAR playbooks with SIEM, EDR, firewalls, threat intelligence platforms, endpoint protection tools, and ticketing systems.


• Develop and manage custom SIEM content, including detection rules, correlation logic, and security monitoring use cases.


• Test, troubleshoot, and optimize playbooks, integrations, and automation workflows for performance, reliability, and scalability.


• Perform root cause analysis and resolve issues related to failed playbooks, integrations, and security automation processes.


• Collaborate with SOC analysts, incident responders, security engineers, and IT teams to identify automation opportunities and improve security operations.


• Support threat detection, incident response, threat intelligence, network security, and vulnerability management activities.


• Develop and maintain automation scripts using Python, JavaScript, PowerShell, or similar scripting languages.


• Document playbook logic, workflows, integrations, configurations, and standard operating procedures.


• Continuously enhance existing automation processes based on security incidents, operational requirements, and performance feedback.


• Assist in evaluating and implementing SOAR technologies and security automation capabilities based on organizational requirements.


• Ensure security automation workflows align with established security processes, operational requirements, and organizational objectives.