Group Specialist - Cyber Engineering Automation

The Peninsular and Oriental Steam Navigation Company; Hyderabad; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

The Peninsular and Oriental Steam Navigation Company is seeking a highly skilled cybersecurity automation engineer to design and implement automated workflows across SOC, CSPM, VM, and IAM platforms.

You will integrate diverse tools via APIs, build incident-response playbooks, and enable real-time telemetry ingestion. The role requires hands-on experience with SOAR platforms and cloud automation, with a strong focus on security at scale.

Qualifications

• Bachelor’s degree in Computer Science or Engineering or equivalent with 16+ years of relevant experience.
• 7–12 years of cybersecurity or security engineering experience, with at least 3 years in security automation/SOAR engineering.
• Hands-on expertise with SOAR platforms (Cortex XSOAR, FortiSOAR, Microsoft Sentinel Logic Apps, Splunk SOAR, or custom Python-based orchestration).
• Security APIs and scripting (Python, PowerShell, REST API, JSON, YAML).
• Cloud environments: Azure, AWS, GCP automation (Lambda, Logic Apps, Functions, EventHub).
• Infrastructure tools: Terraform, Ansible, Jenkins, GitHub Actions.

Responsibilities

• Design and implement automated workflows and playbooks across SOC, CSPM, VM, and IAM platforms.
• Integrate tools using APIs and event-driven automation.
• Build automation for incident response, threat enrichment, and ticketing workflows.
• Develop cross-platform integrations for unified visibility across IT, OT, and Cloud security tools.
• Enable real-time telemetry ingestion and correlation via APIs/data pipelines.
• Create reusable automation modules and templates for global rollout.

Skills

Cortex XSOAR

FortiSOAR

Sentinel Logic Apps

Splunk SOAR

Python

PowerShell

REST API

JSON

YAML

Azure

AWS

GCP

Terraform

Ansible

Jenkins

GitHub Actions

MITRE ATT&CK

Education

Bachelor’s Degree in Computer Science or Engineering

Tools

Terraform

Ansible

Jenkins

GitHub Actions

Job description

KEY ACCOUNTABILITIES:

• Design and implement automated workflows and playbooksacross SOC, CSPM, VM, and IAM platforms.
• Integrate diverse tools such as Sentinel (SIEM/XDR), Wiz (CSPM/CNAPP), SailPoint (IAM), Check Point (EDR/DLP), and Zscaler (SSE)using APIs and event-driven automation.
• Build automation for incident response (IR), threat enrichment, user isolation, and ticketing workflowsusing SOAR and orchestration frameworks (e.g., Microsoft Sentinel Logic Apps, Cortex XSOAR, FortiSOAR, or custom Python-based frameworks).
• Develop and maintain cross-platform integrationsbetween IT, OT, and Cloud security tools for unified visibility.
• Enable real-time telemetry ingestion and correlationusing APIs, data pipelines, or event hubs.
• Create reusable automation modules and templatesfor consistent rollout across global regions.
• Automate cloud posture monitoring and remediation(Azure, AWS, GCP) using CSPM/CNAPP APIs
• Engineer infrastructure-as-code (IaC) security controlsand guardrails using Terraform, Ansible, or ARM templates.
• Integrate automation into DevSecOps pipelinesfor continuous compliance, vulnerability scanning, and drift detection.
• Implement AI-driven response and enrichment playbooksfor phishing, malware, and insider threat cases.
• Develop automation for threat intel enrichment(VirusTotal, MISP, Recorded Future, etc.) and ticket closure workflows (JIRA, ServiceNow).
• Continuously tune automation based on MITRE ATT&CKand MITRE ATLAStechniques.

OTHER:

• Act as an ambassador for DP World always when working; promoting and demonstrating positive behaviours in harmony with DP World’s Founder’s Principles, values and culture; ensuring the highest level of safety is applied in all activities; understanding and following DP World’s Code of Conduct and Ethics policies
• Perform other related duties as assigned

QUALIFICATIONS, EXPERIENCE AND SKILLS:

• A Bachelor’s Degree in Computer Science, Engineering with 16+ years of relevant experience
• 7–12 years of cybersecurity or security engineering experience, with at least 3 years in security automation/SOAR engineering.
• Hands-on expertise with:
• SOAR platforms:Cortex XSOAR, FortiSOAR, Microsoft Sentinel Logic Apps, Splunk SOAR, or custom Python-based orchestration.
• Security APIs and scripting:Python, PowerShell, REST API, JSON, YAML.
• Cloud environments:Azure, AWS, GCP automation (Lambda, Logic Apps, Functions, EventHub).
• Infrastructure tools:Terraform, Ansible, Jenkins, GitHub Actions.
• Knowledge of security tools integrationacross SIEM, EDR/XDR, IAM, DLP, CSPM, CNAPP, CASB, and vulnerability scanners.
• Strong understanding of incident response, SOC processes, and MITRE ATT&CK frameworks.
• Proven track record of reducing manual operational workloadvia automation at scale.