Consultant Cyber D&R XSOAR

Wsne Consulting; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Wsne Consulting is seeking an experienced SOAR Engineer to develop, maintain, and optimize automated playbooks in SOAR platforms to streamline incident response workflows.

The candidate will design and manage custom SIEM content to support security monitoring, threat detection, and effective detection, analysis, and response to security threats.

Qualifications

• Hands-on Cortex XSOAR / XSIAM experience required.
• Hands-on SOAR experience in security orchestration and automation required.
• Experience developing, maintaining, testing, and optimizing automation playbooks.
• Experience automating incident detection, triage, investigation, and response.
• Experience in SIEM content management and integration with SOAR.
• Practical experience in security incident response and security operations.
• Experience integrating SOAR with SIEM, firewalls, threat intelligence, EDR and ticketing systems.
• Proficiency with Python, JavaScript, or PowerShell for automation.
• Experience troubleshooting playbooks and performing root-cause analysis.

Responsibilities

• Develop and optimize automation playbooks within SOAR platforms, preferably Palo Alto Cortex XSOAR/XSIAM.
• Collaborate with security analysts to automate security workflows.
• Integrate playbooks with SIEMs, firewalls, threat intelligence, endpoint protection, and ticketing systems.
• Test, troubleshoot, and optimize playbooks for performance and scalability.
• Document playbook logic, workflows, integrations, and SOPs.
• Provide technical expertise in SOAR configuration and optimization.
• Coordinate with SOC and IT to align automation with security operations requirements.

Skills

Cortex XSOAR

SOAR

Playbook Development

Security Automation

SIEM

Incident Response

Security Tool Integration

Python

JavaScript

PowerShell

Troubleshooting

Education

Bachelor’s or Master’s degree in Cybersecurity/Information Technology

Job description

Job Description

Develop, maintain, and enhance automated playbooks in SOAR platforms to streamline and improve incident response workflows.

The candidate will be responsible for designing, implementing, and managing custom SIEM content to support security monitoring and threat detection capabilities and ensure effective detection, analysis, and response to potential security threats.

Mandatory Skills & Relevant Experience

1. Cortex XSOAR / XSIAM Hands-on experience required.
2. SOAR Hands-on experience in security orchestration and automation required.
3. SOAR Playbook Development – Experience developing, maintaining, testing, and optimizing automation playbooks required.
4. Security Automation – Experience automating incident detection, triage, investigation, and response.
5. SIEM – Experience in SIEM content management and integration with SOAR.
6. Incident Response – Practical experience in security incident response and security operations.
7. Security Tool Integration – Experience integrating SOAR with SIEM, firewalls, threat intelligence, EDR/endpoint protection, and ticketing systems.
8. Scripting & Automation – Experience with Python, JavaScript, or PowerShell for automation and integrations.
9. Troubleshooting & RCA – Experience troubleshooting playbooks, performing root-cause analysis, and optimizing automation processes.

Key Responsibilities

• Develop and optimize automation playbooks within SOAR platforms, preferably Palo Alto Cortex XSOAR/XSIAM.
• Collaborate with security analysts and incident responders to automate security workflows.
• Integrate playbooks with SIEMs, firewalls, threat intelligence, endpoint protection, and ticketing systems.
• Test, troubleshoot, and optimize playbooks for performance and scalability.
• Document playbook logic, workflows, integrations, and SOPs.
• Provide technical expertise in SOAR configuration and optimization.
• Work with security engineering, SOC, and IT teams to align automation with security operations requirements.

Education

Bachelor’s or Master’s degree in Cybersecurity, Information Technology, or a related field.Role & responsibilities