Senior Cyber Security Engineer (SOAR)

Staples India; Chennai District; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Staples India Business Innovation Hub Private Limited is seeking a cybersecurity professional to develop and maintain SOAR playbooks and automated workflows using Microsoft Sentinel Logic Apps. The role involves integrating SIEM, EDR, NDR, identity, cloud, and ticketing systems into end-to-end processes, onboarding new automation use cases, and improving platform reliability.

The candidate should have 4–7 years in cybersecurity, with experience in SIEM, firewalls, IDS, and familiarity with

Qualifications

• 4–7 years of cybersecurity experience with a proven track record.
• Experience with SIEM, firewalls and IDS.
• Proficiency in cybersecurity frameworks and standards.

Responsibilities

• Develop and maintain SOAR playbooks, integrations, and automations with Microsoft Sentinel Logic Apps.
• Build API-driven workflows linking SIEM, EDR, NDR, identity, cloud, network, threat intel, and ticketing systems.
• Onboard new automation use cases from requirements through design, testing and deployment.
• Enhance automations to reduce analyst workload and improve reliability.
• Troubleshoot failures and platform errors; implement durable fixes.
• Collaborate with SOC, IR, Threat Hunting and Engineering to identify automation opportunities.
• Develop enrichment, triage, containment, and remediation automations for incident response.
• Maintain documentation for playbooks, connectors, authentication models, and runbooks.
• Monitor SOAR health and performance; recommend improvements for stability.
• Mentor junior analysts and engineers on automation development and best practices.

Skills

Cybersecurity frameworks

SIEM

Firewalls

Intrusion detection

SOAR automation

Education

Master’s degree in Cybersecurity

Tools

Microsoft Sentinel

Microsoft Defender for Endpoint

Job description

Staples India Business Innovation Hub Private Limited | Permanent

Duties & Responsibilities

• Develop and maintain SOAR playbooks, integrations, and automations using Microsoft Sentinel Logic Apps.
• Build API-driven workflows that integrate SIEM (Microsoft Sentinel), EDR (Microsoft Defender for Endpoints), NDR, identity, cloud, network, threat intelligence, and ticketing systems into end to end automated processes.
• Support the onboarding of new automation use cases, including requirements gathering, workflow design, testing, and deployment into production.
• Enhance and tune existing automations to reduce manual analyst workload, ensure reliability, and improve error handling and orchestration efficiency.
• Troubleshoot automation failures, integration issues, and platform errors, implementing durable fixes and improvements.
• Collaborate with SOC, IR, Threat Hunting, and Engineering teams to identify high value automation opportunities and translate them into actionable workflows.
• Develop enrichment, triage, containment, and remediation automations that accelerate incident response and improve consistency.
• Maintain updated documentation for playbooks, workflows, connectors, authentication models, and operational runbooks.
• Monitor SOAR platform health, performance, and workflow success rates, making recommendations to improve stability and scalability.
• Mentor junior analysts and engineers on automation development, platform capabilities, and best practices for SOAR operations.

Requirements

Minimum Years of Experience: 4-7 years

Minimum of 4 years of experience in a cybersecurity role, with a proven track record of success.

Basic Qualifications

• Proficient in various cybersecurity frameworks and standards.
• Experience with security tools such as SIEM, firewalls, and intrusion detection systems.

Preferred Qualifications

• Master’s degree in Cybersecurity or related field.