Senior Analyst-IT & Information Security- Python Security Automation_3377

Allianz Technology; Thiruvananthapuram; Presencial; INR 1 400 000 - 2 100 000; Tempo integral

Resumo da oferta

Allianz Technology in India is seeking an Automation Engineer to strengthen the Detection Cluster within the Allianz Cyber Defense Center. You will design and maintain SOAR playbooks and Google SecOps workflows to automate security cases at scale, integrating Google SecOps SIEM with CrowdStrike EDR and other data sources for seamless ingestion and correlation.

You will implement Python automation, orchestrate REST API integrations, and reduce manual analyst touchpoints, enabling scalable

Qualificações

• Bachelor’s / Master’s in a technical field.
• 3–5 years in security operations, automation, or SOC/SIEM engineering.
• Experience building SOAR playbooks and automation workflows.
• Experience integrating tools via REST APIs.

Responsabilidades

• Build, maintain, and optimize SOAR playbooks within Google SecOps for triage, investigation, and remediation.
• Integrate Google SecOps SIEM with CrowdStrike EDR and data sources for alert ingestion and correlation.
• Automate the full security case lifecycle from log ingestion to incident creation or closure.
• Develop Python scripts and automation workflows to reduce analyst touchpoints.
• Integrate REST APIs with security tools for orchestration and enrichment.
• Troubleshoot and improve existing SOAR playbooks and automation pipelines.

Conhecimentos

Google SecOps

Python scripting

REST API

Security case lifecycle

Git

Gen AI awareness

CrowdStrike EDR understanding

Formação académica

Bachelor’s / Master’s in a technical field

Ferramentas

Jenkins

GitHub Actions

Grafana

Descrição da oferta de emprego

The Automation Engineer is the operational backbone of the ‘Detection Cluster’ in Allianz Cyber Defense Center (ACDC). The role is responsible for building and maintaining the SOAR playbooks and Google SecOps workflows that allow the ACDC to handle security cases at scale — centralized and as automated as possible.The engineer will integrate Google SecOps SIEM with CrowdStrike EDR, automate the end-to-end security case lifecycle, and continuously reduce manual effort across the security operations team.

Core Responsibilities

Experience, Technical and Functional Skills

• Build, maintain, and optimize SOAR playbooks within Google SecOps to automate security case triage, investigation, and remediation.
• Integrate Google SecOps SIEM with CrowdStrike EDR and other data sources for seamless alert ingestion and correlation.
• Automate the full security case lifecycle: log ingestion → alert creation → triage → true/false positive classification → Archer incident creation or case closure.
• Develop Python scripts and automation workflows to reduce manual analyst touchpoints across the ACDC.
• Integrate REST APIs with third‑party security tools for orchestration and enrichment.
• Troubleshoot and improve existing SOAR playbooks and automation pipelines.

Primary Skills

• Google SecOps (Chronicle SIEM + SOAR) — hands‑on experience building and managing SOAR playbooks.
• Python scripting (Mandatory) — for automation, playbook actions, and security workflow development.
• CrowdStrike EDR understanding is a plus for integration with Google SecOps SIEM for alert ingestion and automated response.
• REST API (Mandatory) - integration with security tools (EDR, ticketing, threat intelligence platforms).
• Security case lifecycle automation — from log ingestion through triage to Archer incident creation or closure.
• Git — version control for automation code and SOAR configurations.
• Exposure in AI ,Agentic AI,Gen AI is preferrable

Good To Have

• CI/CD tools (Jenkins, GitHub Actions) for deploying SOAR automation updates.
• Entry‑level security certification (CompTIA Security+ or equivalent).
• Basic cloud knowledge (AWS or Azure) for security tool integrations.
• Familiarity with Grafana or similar for SOC metrics dashboards.

Qualifications

Education: Bachelor’s / Master’s full‑time degree in a Technical stream.

Experience: 3 to 5 years of hands‑on experience in security operations, security automation, or a SOC/SIEM engineering role — with demonstrated expertise in building SOAR playbooks, scripting automation workflows, and integrating security tools via REST APIs.

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.

At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.

We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.

Join us. Let's care for tomorrow.