Senior Analyst-IT & Information Security- Python Security Automation_3377

Allianz Technology; Pune District; Presencial; INR 1 200 000 - 2 200 000; Tempo integral

Resumo da oferta

Allianz Technology's Automation Engineer within the Allianz Cyber Defense Center (ACDC) builds and maintains SOAR playbooks and Google SecOps workflows to scale security case handling across the team. You will integrate Google SecOps SIEM with CrowdStrike EDR, automate end-to-end lifecycle from log ingestion to incident closure, and develop Python scripts to reduce manual touchpoints.

Experience in security operations, REST APIs, and AI-enabled security is preferred; exposure to CI/CD and

Qualificações

• 3–5 years in security operations, security automation, or a SOC/SIEM engineering role.
• Proven experience building SOAR playbooks and automations via REST APIs.
• Strong scripting and integration skills with security tools.

Responsabilidades

• Build, maintain, and optimize SOAR playbooks within Google SecOps to automate security case triage, investigation, and remediation.
• Integrate Google SecOps SIEM with CrowdStrike EDR and other data sources for seamless alert ingestion and correlation.
• Automate the full security case lifecycle: log ingestion → alert creation → triage → true/false positive classification → Archer incident creation or case closure.
• Develop Python scripts and automation workflows to reduce manual analyst touchpoints across the ACDC.
• Integrate REST APIs with third‑party security tools for orchestration and enrichment.
• Troubleshoot and improve existing SOAR playbooks and automation pipelines.

Conhecimentos

Google SecOps

Python

REST API

Git

AI/Gen AI

SOAR

Formação académica

Bachelor’s / Master’s in Technical field

Ferramentas

CrowdStrike EDR

Grafana

Jenkins/GitHub Actions

AWS / Azure

Descrição da oferta de emprego

The Automation Engineer is the operational backbone of the ‘Detection Cluster’ in Allianz Cyber Defense Center (ACDC). The role is responsible for building and maintaining the SOAR playbooks and Google SecOps workflows that allow the ACDC to handle security cases at scale — centralized and as automated as possible.The engineer will integrate Google SecOps SIEM with CrowdStrike EDR, automate the end-to-end security case lifecycle, and continuously reduce manual effort across the security operations team.

Core Responsibilities

Experience, Technical and Functional Skills

• Build, maintain, and optimize SOAR playbooks within Google SecOps to automate security case triage, investigation, and remediation.
• Integrate Google SecOps SIEM with CrowdStrike EDR and other data sources for seamless alert ingestion and correlation.
• Automate the full security case lifecycle: log ingestion → alert creation → triage → true/false positive classification → Archer incident creation or case closure.
• Develop Python scripts and automation workflows to reduce manual analyst touchpoints across the ACDC.
• Integrate REST APIs with third‑party security tools for orchestration and enrichment.
• Troubleshoot and improve existing SOAR playbooks and automation pipelines.

Primary Skills

• Google SecOps (Chronicle SIEM + SOAR) — hands‑on experience building and managing SOAR playbooks.
• Python scripting (Mandatory) — for automation, playbook actions, and security workflow development.
• CrowdStrike EDR understanding is a plus for integration with Google SecOps SIEM for alert ingestion and automated response.
• REST API (Mandatory) - integration with security tools (EDR, ticketing, threat intelligence platforms).
• Security case lifecycle automation — from log ingestion through triage to Archer incident creation or closure.
• Git — version control for automation code and SOAR configurations.
• Exposure in AI ,Agentic AI,Gen AI is preferrable

Good To Have

• CI/CD tools (Jenkins, GitHub Actions) for deploying SOAR automation updates.
• Entry‑level security certification (CompTIA Security+ or equivalent).
• Basic cloud knowledge (AWS or Azure) for security tool integrations.
• Familiarity with Grafana or similar for SOC metrics dashboards.

Qualifications

Education: Bachelor’s / Master’s full‑time degree in a Technical stream.

Experience: 3 to 5 years of hands‑on experience in security operations, security automation, or a SOC/SIEM engineering role — with demonstrated expertise in building SOAR playbooks, scripting automation workflows, and integrating security tools via REST APIs.

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.

At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.

We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.

Join us. Let's care for tomorrow.