Security Consultant

Tech Mahindra; Dadri; Vor Ort; INR 2.500.000 - 6.000.000; Vollzeit

Zusammenfassung

Tech Mahindra in Noida, India, is seeking an experienced Cortex XSOAR Administrator to manage and optimize the Palo Alto Networks platform in an onsite, client-facing environment.

You will design playbooks, integrations, and dashboards, automate SOC activities, and ensure security operations run smoothly while collaborating with SOC analysts and platform teams.

The role requires 5+ years in cybersecurity and 3+ years with Cortex XSOAR, with a preference for relevant certifications.

Qualifikationen

• 5+ years in cybersecurity or security operations.
• 3+ years hands-on Cortex XSOAR administration, implementation, integration, or automation.
• Bachelor’s or equivalent in CS/IT/Cybersecurity.
• XSOAR certification preferred; other security certs advantageous.

Aufgaben

• Administer, configure, maintain, and support Cortex XSOAR across prod/non-prod environments.
• Design, develop, test, and optimize playbooks, automations, integrations, dashboards, and workflows.
• Integrate Cortex XSOAR with security tools using content packs, REST APIs, webhooks, JSON, and Python scripts.
• Connect and orchestrate SIEM, EDR/XDR, firewalls, threat intel, IAM/PAM, ticketing, vulnerability management, and cloud security.
• Automate SOC activities: enrichment, triage, containment, notification, escalation, and evidence gathering.
• Troubleshoot integration failures, authentication issues, API errors, and performance concerns.
• Monitor platform health, job execution, engine connectivity, and content updates.
• Collaborate with SOC analysts, incident responders, engineers, and clients to deliver secure automation.
• Apply change control, access control, credentials protection, versioning, and rollback for SOAR content.
• Maintain technical docs, integration specs, runbooks, and knowledge articles.

Kenntnisse

Cortex XSOAR administration

Enterprise SOC experience

Python scripting, REST APIs, JSON, web

SOC operations, IR, triage

Splunk

EDR/XDR, firewalls, IAM/PAM

Secure integration design

MITRE ATT&CK framework

Ausbildung

Bachelor’s degree in CS/IT/Cybersecurity or equivalent

Cortex XSOAR certification

Security certifications (CISSP, GCIH, CEH, etc.)

Tools

Cortex XSOAR

Splunk

Python

Jobbeschreibung

Cortex SOAR Administrator (Security Orchestration, Automation and Response)

LOCATION - Noida, India

WORK MODE - Onsite, 5 days/week

EMPLOYMENT - Full time

Role Overview

We are seeking an experienced Cortex SOAR Administrator to administer, enhance, and optimize the Palo Alto Networks Cortex XSOAR platform. The role will focus on integrating enterprise security technologies, developing automation and response workflows, and improving the effectiveness and resilience of security operations. The successful candidate will bring strong hands on technical experience and be comfortable working in a client facing, onsite environment.

Key Responsibilities

• Administer, configure, maintain, and support the Cortex XSOAR platform across production and non-production environments.
• Design, develop, test, and optimize playbooks, automations, integrations, incident layouts, dashboards, and workflows.
• Integrate Cortex XSOAR with security and enterprise platforms using supported content packs, REST APIs, webhooks, JSON, and custom Python scripts.
• Connect and orchestrate technologies such as SIEM, EDR/XDR, firewalls, threat intelligence, email security, IAM/PAM, ticketing, vulnerability management, and cloud security platforms.
• Automate repetitive SOC activities, enrichment, triage, containment, notification, escalation, and evidence gathering processes.
• Troubleshoot integration failures, authentication issues, API errors, playbook exceptions, and performance concerns.
• Monitor platform health, job execution, engine connectivity, content updates, and operational availability.
• Collaborate with SOC analysts, incident responders, security engineers, platform teams, and client stakeholders to translate operational needs into secure automation.
• Apply change control, testing, access control, credential protection, versioning, and rollback practices for SOAR content.
• Maintain technical documentation, integration specifications, playbook logic, operational runbooks, and knowledge articles.

Required Technical Skills

• Strong hands on experience in Palo Alto Networks Cortex XSOAR administration, configuration, and troubleshooting.
• Demonstrated experience integrating security tools with Cortex XSOAR in an enterprise SOC environment.
• Proficiency in Python scripting, REST APIs, JSON, webhooks, authentication methods, and error handling.
• Solid understanding of SOC operations, incident response, alert triage, threat intelligence, and security orchestration.
• Working knowledge of SIEM platforms such as Splunk.
• Exposure to EDR/XDR, firewalls, email security, IAM/PAM, vulnerability management, ticketing platforms, and cloud security services.
• Understanding of secure integration design, least privilege, secrets handling, logging, auditability, and production change management.
• Familiarity with the MITRE ATT&CK framework and common security incident types.

Experience and Qualifications

• 5+ years of overall cybersecurity or security operations experience.
• 3+ years of hands-on Cortex XSOAR administration, implementation, integration, or automation experience.
• Bachelor‿s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent practical experience.
• Palo Alto Networks Cortex XSOAR certification is preferred. Relevant certifications such as CISSP, GCIH, CEH, Security+, or cloud security certifications are advantageous.