Automation Engineer

Tekskills; Pune District; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Tekskills in Mumbai is seeking an experienced SOC Automation Specialist to design, operate, and manage SOAR and automation platforms. You will create, maintain and customize cross-platform playbooks and workflows, and centralize tracking of SLAs, KPIs and KRIs.

The role focuses on reducing MTTR and MTTD while aligning automated actions with security policies. The candidate should hold key security certifications and demonstrate expertise in integrating SOC tools and IT systems to enhance

Qualifications

• 4+ years of experience in SOC automation and security operations.
• Experience in designing and operating SOAR and automation platforms.
• Ability to create and manage cross-platform playbooks.
• Knowledge of aligning automated responses with security policies.

Responsibilities

• Design, operate, and manage SOAR and automation platform.
• Create, maintain, and customize cross-platform playbooks/workflows.
• Centralized automated tracking of SLAs, KPIs & KRIs.
• Automate analysis and response workflows for routine security analyst activities.
• Align automated responses with policies to reduce MTTR and damage.
• Intra SOC technologies integrations.
• Integration with IT security technologies and IT technologies.
• Define response playbooks and oversee automated actions.
• Automated filtering of false positives and prioritizing genuine threats.
• Decrease MTTD, MTTR and improve SOC efficiency.
• Provide annual roadmap for innovations with quarterly milestones linked to milestones.

Skills

SOAR platform

Automation workflows

Playbooks and workflows

MTTR reduction

Threat prioritization

Education

Security certifications (EC-Council/CompTIA/GIAC)

Tools

SIEM

Vulnerability Management

DAM

UBA

SOAR

Job description

Role & responsibilities

Preferred candidate profile

Experience: 4+ Years

Location: Mumbai

• Design, operate, manage SOAR and automation platform
• Creation, maintenance, and customization of cross platform playbooks/workflows.
• Centralized automated tracking of SLAs, KPIs & KRIs
• Automating analysis and response workflows for routine security analyst activities
• Ensure alignment of automated responses with organizational policies with an objective of reduced Mean Time to Respond (MTTR) and minimized damage.
• Intra SOC technologies integrations
• Integration with IT security technologies and IT technologies
• Define response playbooks and oversee automated actions
• Automated filtering of false positives and prioritizing genuine threats for investigation
• Ongoing efforts to decrease Mean Time to Detect (MTTD), Mean Time to Repair (MTTR), number of false positives and improving overall efficiency of SOC.
• Provide Annual roadmap for innovations, new initiatives, SOC Automation & Process Enhancement with quarterly milestones the same shall be linked to respective
• milestone-based payments.
• The roadmap should align with the bank's security strategy, support ongoing SOC maturity, and adapt to emerging threats and regulatory changes.

Required Certification

Mandatory (Any-one): - Certified SOC Analyst (EC-Council), Computer Hacking Forensic Investigator (EC-Council), Certified Ethical Hacker (EC-Council), CompTIA Security+, CompTIA CySA+ (Cybersecurity Analyst), GIAC Certified Incident Handler (GCIH) or equivalent. Product Certifications (Preferred): - Product Certifications on SOC Security Tools such as SIEM/Vulnerability Management/ DAM/UBA/ SOAR/NBA etc