Automation Engineer

Tekskills; Mumbai; Hybrid; INR 140,000 - 220,000; Full time

Job summary

Tekskills in Mumbai seeks a security operations professional to design, operate, and enhance SOAR driven automation. You will create playbooks, automate threat analysis, and drive the efficiency of SOC operations with a focus on reducing MTTR and MTTD.

The role requires 4+ years in security operations and relevant certifications, with hands-on experience across SIEM, vulnerability management, and SOAR tools.

Qualifications

• 4+ years of experience in a security operations role.
• Certifications in EC-Council, CompTIA, GIAC or equivalent are mandatory.
• Experience with design and operation of SOAR and automation platforms.

Responsibilities

• Design, operate, and manage SOAR and automation platform.
• Create, maintain, and customize cross‑platform playbooks/workflows.
• Automate analysis and response workflows for routine security analyst activities.
• Ensure automated responses align with policies to reduce MTTR and damage.
• Centralized tracking of SLAs, KPIs and KRIs.
• Integrate intra SOC technologies and IT security technologies.
• Define response playbooks and oversee automated actions.
• Automate filtering of false positives and prioritize genuine threats.

Skills

SOC automation

SOAR

Incident response

Threat analysis

KPI tracking

Tools

SIEM

Vulnerability Mgmt

DAM

UBA

SOAR tools

Job description

Role & responsibilities

Preferred candidate profile

Experience: 4+ Years

Location: Mumbai

• Design, operate, manage SOAR and automation platform
• Creation, maintenance, and customization of cross platform playbooks/workflows.
• Centralized automated tracking of SLAs, KPIs & KRIs
• Automating analysis and response workflows for routine security analyst activities
• Ensure alignment of automated responses with organizational policies with an objective of reduced Mean Time to Respond (MTTR) and minimized damage.
• Intra SOC technologies integrations
• Integration with IT security technologies and IT technologies
• Define response playbooks and oversee automated actions
• Automated filtering of false positives and prioritizing genuine threats for investigation
• Ongoing efforts to decrease Mean Time to Detect (MTTD), Mean Time to Repair (MTTR), number of false positives and improving overall efficiency of SOC.
• Provide Annual roadmap for innovations, new initiatives, SOC Automation & Process Enhancement with quarterly milestones the same shall be linked to respective
• milestone-based payments.
• The roadmap should align with the bank's security strategy, support ongoing SOC maturity, and adapt to emerging threats and regulatory changes.

Required Certification

Mandatory (Any-one): - Certified SOC Analyst (EC-Council), Computer Hacking Forensic Investigator (EC-Council), Certified Ethical Hacker (EC-Council), CompTIA Security+, CompTIA CySA+ (Cybersecurity Analyst), GIAC Certified Incident Handler (GCIH) or equivalent. Product Certifications (Preferred): - Product Certifications on SOC Security Tools such as SIEM/Vulnerability Management/ DAM/UBA/ SOAR/NBA etc