Cyber Security Analyst

Bahwan Cybertek Group; Chennai District; Hybride; INR 1 200 000 - 1 800 000; Plein temps

Résumé du poste

Bahwan Cybertek Group is seeking a Cybersecurity Analyst to lead SOC automation initiatives. You will design and maintain automated playbooks, orchestrate tool integrations, and drive incident response automation to improve SOC efficiency.

The role involves collaborating with SOC Analysts, Incident Responders, and Security Engineers, developing Python-based scripts, and enhancing security workflows and KPIs. A strong XSOAR background is essential.

Qualifications

• Hands-on expertise in Palo Alto Cortex XSOAR and incident response automation.
• Experience in security orchestration, automation, and response platforms.
• Design and develop automated security playbooks and workflows.

Responsabilités

• Design, develop, and maintain automated security playbooks using Cortex XSOAR.
• Build integrations between SIEMs, EDR, IAM, firewalls, and ticketing systems.
• Automate incident response to improve SOC effectiveness and reduce manual work.
• Collaborate with SOC Analysts, Incident Responders, and Security Engineers to identify automation opportunities.
• Develop scripts and integrations using Python and REST APIs.
• Troubleshoot and optimize existing automation workflows and playbooks.
• Implement enrichment, containment, remediation, and notification workflows.
• Analyze incidents and recommend automation improvements.
• Maintain documentation for playbooks, workflows, and integrations.
• Support continuous improvement of SOC processes and security maturity.
• Participate in security monitoring and incident response as needed.

Connaissances

Cortex XSOAR

SOAR

Playbook design

Workflow automation

IR automation

SOC processes

Outils

Splunk

QRadar

Sentinel

ArcSight

CrowdStrike

Defender

Cortex XDR

Description du poste

Job Summary

We are looking for a skilled Cybersecurity Analyst with strong experience in Security Operations Center (SOC) Automation, Security Orchestration, Automation and Response (SOAR) platforms, and playbook development. The ideal candidate should have hands‑on expertise in Palo Alto Cortex XSOAR, incident response automation, security integrations, and workflow optimization to improve SOC efficiency and reduce response times.

The candidate will be responsible for designing, developing, and maintaining automated security workflows, integrating security tools, and supporting SOC operations through orchestration and automation initiatives.

Key Responsibilities

• Design, develop, and maintain automated security playbooks using Palo Alto Cortex XSOAR.
• Build and manage integrations between security tools such as SIEM, EDR, IAM, Firewalls, Threat Intelligence Platforms, and ticketing systems.
• Automate incident response processes to improve SOC effectiveness and reduce manual efforts.
• Collaborate with SOC Analysts, Incident Responders, and Security Engineers to identify automation opportunities.
• Develop custom scripts and integrations using Python and REST APIs.
• Troubleshoot and optimize existing automation workflows and playbooks.
• Implement enrichment, containment, remediation, and notification workflows.
• Analyze security incidents and recommend automation improvements.
• Maintain documentation for playbooks, workflows, integrations, and operational procedures.
• Support continuous improvement of SOC processes, KPIs, and security operations maturity.
• Participate in security monitoring, threat hunting, and incident response activities when required.

Required Skills

SOAR & Automation

• Palo Alto Cortex XSOAR Administration and Development
• Security Orchestration, Automation and Response (SOAR)
• Playbook Design and Development
• Workflow Automation
• Incident Response Automation
• Security Operations Center (SOC) Processes

Security Technologies

• SIEM Platforms (Splunk, QRadar, Sentinel, ArcSight, etc.)
• Endpoint Detection & Response (CrowdStrike, Defender, Cortex XDR)
• Threat Intelligence Integration
• Identity & Access Management (IAM)
• Firewalls and Network Security Tools