Cyber Security Manager

Wsne Consulting; Mumbai; On-site; INR 1,000,000 - 1,800,000; Full time

Job summary

Wsne Consulting in Mumbai is seeking an experienced security automation engineer to develop, maintain, and enhance automated playbooks in SOAR platforms, streamlining incident response workflows.

You will design and manage custom SIEM content, ensuring the SIEM is optimized for detection, analysis, and rapid response to threats. 4–7 years of relevant experience, familiarity with Palo Alto XSOAR/XSIAM preferred.

Qualifications

• 4-7 years of experience in Develop and optimize automation playbooks within SOAR platforms (preferably Palo Alto XSOAR/XSIAM).
• Deep understanding of security concepts, including incident response, threat intelligence, network security, and vulnerability management.
• Utilize SOAR platforms to automate security processes and response activities.
• Collaborate with security analysts and incident responders to design playbooks that automate and orchestrate the detection, triage, investigation, and remediation of security incidents.
• Integrate playbooks with SIEMs, firewalls, threat intelligence platforms, endpoint protection tools, and ticketing systems to improve SOC efficiency.
• Test playbooks to ensure they work, troubleshoot issues, and optimize for performance and scalability.
• Document playbook logic, workflows, and integrations for maintainability.
• Work with security engineers, analysts, and IT teams to align playbook development with security needs.

Responsibilities

• Develop, maintain, and enhance automated playbooks in SOAR platforms to streamline incident response workflows.
• Proactively manage SIEM content and tailor rules to strengthen monitoring and threat detection.
• Design, implement, and manage custom SIEM content supporting security monitoring capabilities.
• Ensure SIEM optimization for accurate detection, analysis, and response to threats.

Skills

SOAR playbooks

Incident response

Threat intelligence

Network security

Vulnerability management

Automation scripting

Python

PowerShell

JavaScript

Collaboration

Education

Bachelor's/Master's in CS or InfoSec

Tools

SIEMs

Firewalls

Threat intel platforms

Endpoint protection tools

Ticketing systems

Job description

Role & responsibilities

• Develop, maintain, and enhance automated playbooks in SOAR platforms to streamline and improve incident response workflows.
• Proactive SIEM Content Management Specialist to join our security operations team. The ideal candidate.
• Will be responsible for designing, implementing, and managing custom SIEM content that supports the organization's security monitoring and threat detection capabilities.
• Ensuring that our SIEM system is optimized to detect, analyze, and respond to potential security threats effectively and efficiently.

Preferred candidate profile

• 4-7 years of experience into Develop and optimize automation playbooks within SOAR platforms (preferably Palo Alto XSOAR/XSIAM).
• Deep understanding of security concepts, including incident response, threat intelligence, network security, and vulnerability management.
• Utilize SOAR platforms to automate security processes and response activities.
• Collaborate with security analysts and incident responders to design playbooks that automate and orchestrate the detection, triage, investigation, and remediation of security incidents.
• Integrate playbooks with a variety of security tools such as SIEMs, firewalls, threat intelligence platforms, endpoint protection tools, and ticketing systems to improve the efficiency of the security operations center
• Test playbooks to ensure they are working as expected, troubleshoot issues, and optimize them for performance and scalability.
• Document playbook logic, workflows, and integrations to ensure that they are understandable and maintainable by other team members.
• Work closely with security engineers, analysts, and IT teams to align playbook development with security operations needs and organizational goals.
• Provide technical expertise in the configuration and optimization of SOAR tools.
• Assist in the evaluation and selection of SOAR technologies based on organizational needs.
• Document and maintain standard operating procedures for SOAR processes and playbooks.
• Experience with Cortex XSOAR (preferred) or other security orchestration platforms.
• Ability to troubleshoot issues, perform root cause analysis, and continuously optimize automation processes.
• Knowledge of scripting and automation (Python, JavaScript, PowerShell, etc.) for building playbooks and integrations.
• Bachelors orMaster's degree in Computer Science, Information Security, or related field.