Senior Security Operations Engineer

Webhosting; Bengaluru; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

DigiCert in Bengaluru, India, is seeking a highly skilled SOAR engineer to design, implement, and maintain security automation and response workflows. You will work across teams to integrate tools such as CrowdStrike, RecordedFuture, and Splunk, improving threat detection and incident response capabilities.

You will lead automation initiatives, mentor junior engineers, and help shape the automation roadmap while leveraging Python, RESTful APIs, and cloud platforms to secure complex environments.

Qualifications

• 5+ years in security operations or SOAR engineering.
• Strong Python experience and automation scripting.
• Experience with AWS security and cloud automation.
• Experience integrating CrowdStrike and RecordedFuture.
• Advanced knowledge of Splunk: SPL queries, dashboards, visualizations.
• Experience building and troubleshooting RESTful APIs for internal or security applications.
• Excellent problem-solving, written, and verbal communication skills.
• Proven ability to mentor junior engineers and lead cross-functional automation projects.

Responsibilities

• Design, implement, and maintain SOAR workflows and playbooks to automate incident response and threat management processes.
• Develop, maintain, and optimize Python scripts and automation tools to enhance security operations and response times.
• Integrate and automate security tools such as CrowdStrike, RecordedFuture, and SIEM platforms like Splunk, providing actionable insights and improved response capabilities.
• Develop advanced Splunk queries, dashboards, and alerts to support threat hunting, incident investigations, and operational monitoring.
• Design and implement automation solutions in AWS, including enforcing security controls, monitoring compliance, and streamlining cloud operations.
• Perform advanced log analysis, data correlation, and anomaly detection to support proactive threat detection and investigations.

Skills

Security operations

SOAR engineering

Python

Automation scripting

AWS security

CrowdStrike

RecordedFuture

Splunk

RESTful APIs

Mentoring

Tools

Tines

Splunk

CrowdStrike

RecordedFuture

Job description

Job Description

Who we are

DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com

Job summary

We are seeking a highly skilled SOAR engineer with deep expertise in security automation, orchestration, and cloud security. In this senior role, you will design, implement, and maintain security orchestration, automation, and response workflows to improve threat detection, incident response, and operational efficiency. The ideal candidate brings hands-on experience with one or more SOAR platforms (such as Splunk SOAR, Palo Alto XSOAR, Tines, or similar), and will leverage Python, APIs, and modern cloud and security technologies to integrate multiple tools, automate processes, and enhance visibility across the enterprise. Experience with Tines is a plus, though candidates with strong SOAR fundamentals and a track record of picking up new platforms quickly are strongly encouraged to apply.

You will be a hands-on technical leader, collaborating across teams to ensure scalable and resilient security operations while mentoring junior engineers and shaping the automation roadmap. Contribute to the strategic automation roadmap, evaluating new tools and approaches to improve security operations maturity.

What you will do

• Design, implement, and maintain SOAR workflows and playbooks to automate incident response and threat management processes.
• Develop, maintain, and optimize Python scripts and automation tools to enhance security operations and response times.
• Integrate and automate security tools such as CrowdStrike, RecordedFuture, and SIEM platforms like Splunk, providing actionable insights and improved response capabilities.
• Develop advanced Splunk queries, dashboards, and alerts to support threat hunting, incident investigations, and operational monitoring.
• Design and implement automation solutions in AWS, including enforcing security controls, monitoring compliance, and streamlining cloud operations.
• Perform advanced log analysis, data correlation, and anomaly detection to support proactive threat detection and investigations.

What you will have

• 5+ years of experience in security operations, SOAR engineering (Tines preferred), or security automation.
• Strong proficiency in Python and experience developing automation scripts or tools.
• Experience with AWS security and cloud automation.
• Experience integrating endpoint security tools (CrowdStrike) and threat intelligence platforms (RecordedFuture).
• Advanced knowledge of Splunk: SPL queries, dashboards, and visualizations.
• Experience building and troubleshooting RESTful APIs for internal or security applications.
• Excellent problem-solving, written, and verbal communication skills.
• Proven ability to mentor junior engineers and lead cross-functional automation projects.