Senior Security Operations Engineer

DigiCert; Bengaluru; On-site; INR 1,800,000 - 2,400,000; Full time

Benefits offered by this job

Generous time off policies

Top shelf benefits

Education, wellness and lifestyle

Job summary

DigiCert is seeking a senior SOAR engineer to design and maintain security automation, orchestration, and response workflows. You will lead hands-on security operations improvement, mentor juniors, and collaborate with cross‑functional teams to elevate automation maturity across the enterprise.

The role emphasizes experience with SOAR platforms (e.g., Splunk SOAR, XSOAR, or Tines), Python scripting, and integrating security tools to enhance threat detection and incident response in a cloud-first

Qualifications

• 5+ years of experience in security operations, SOAR engineering (Tines preferred), or security automation.
• Strong proficiency in Python and experience developing automation scripts or tools.
• Experience with AWS security and cloud automation.
• Experience integrating endpoint security tools (CrowdStrike) and threat intelligence platforms (RecordedFuture).
• Advanced knowledge of Splunk: SPL queries, dashboards, and visualizations.
• Experience building and troubleshooting RESTful APIs for internal or security applications.
• Excellent problem‑solving, written, and verbal communication skills.
• Proven ability to mentor junior engineers and lead cross‑functional automation projects.

Responsibilities

• Design, implement, and maintain SOAR workflows and playbooks to automate incident response and threat management processes.
• Develop, maintain, and optimize Python scripts and automation tools to enhance security operations and response times.
• Integrate and automate security tools such as CrowdStrike, RecordedFuture, and SIEM platforms like Splunk, providing actionable insights and improved response capabilities.
• Develop advanced Splunk queries, dashboards, and alerts to support threat hunting, incident investigations, and operational monitoring.
• Design and implement automation solutions in AWS, including enforcing security controls, monitoring compliance, and streamlining cloud operations.
• Perform advanced log analysis, data correlation, and anomaly detection to support proactive threat detection and investigations.

Skills

Python

SOAR engineering

Splunk

AWS security

CrowdStrike

RecordedFuture

RESTful APIs

Threat intelligence

Mentoring

Leadership

Education

Master's degree

Tools

Splunk

CrowdStrike

RecordedFuture

Flask

FastAPI

Job description

Who we are

DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com

Job summary

We are seeking a highly skilled SOAR engineer with deep expertise in security automation, orchestration, and cloud security. In this senior role, you will design, implement, and maintain security orchestration, automation, and response workflows to improve threat detection, incident response, and operational efficiency. The ideal candidate brings hands‑on experience with one or more SOAR platforms (such as Splunk SOAR, Palo Alto XSOAR, Tines, or similar), and will leverage Python, APIs, and modern cloud and security technologies to integrate multiple tools, automate processes, and enhance visibility across the enterprise. Experience with Tines is a plus, though candidates with strong SOAR fundamentals and a track record of picking up new platforms quickly are strongly encouraged to apply.

You will be a hands‑on technical leader, collaborating across teams to ensure scalable and resilient security operations while mentoring junior engineers and shaping the automation roadmap. Contribute to the strategic automation roadmap, evaluating new tools and approaches to improve security operations maturity.

What you will do

• Design, implement, and maintain SOAR workflows and playbooks to automate incident response and threat management processes.
• Develop, maintain, and optimize Python scripts and automation tools to enhance security operations and response times.
• Integrate and automate security tools such as CrowdStrike, RecordedFuture, and SIEM platforms like Splunk, providing actionable insights and improved response capabilities.
• Develop advanced Splunk queries, dashboards, and alerts to support threat hunting, incident investigations, and operational monitoring.
• Design and implement automation solutions in AWS, including enforcing security controls, monitoring compliance, and streamlining cloud operations.
• Perform advanced log analysis, data correlation, and anomaly detection to support proactive threat detection and investigations.

What you will have

• 5+ years of experience in security operations, SOAR engineering (Tines preferred), or security automation.
• Strong proficiency in Python and experience developing automation scripts or tools.
• Experience with AWS security and cloud automation.
• Experience integrating endpoint security tools (CrowdStrike) and threat intelligence platforms (RecordedFuture).
• Advanced knowledge of Splunk: SPL queries, dashboards, and visualizations.
• Experience building and troubleshooting RESTful APIs for internal or security applications.
• Excellent problem‑solving, written, and verbal communication skills.
• Proven ability to mentor junior engineers and lead cross‑functional automation projects.

Nice to have

• Exposure to cloud security posture management tools (e.g., Wiz CNAPP).
• Experience building lightweight internal web applications or APIs in Python (e.g., Flask or FastAPI).
• Master’s degree in a technical discipline.
• Familiarity with SASE products, WAFs, and cloud identity providers (SSO, SAML).
• Experience with security, compliance, and privacy frameworks (ISO 27001, NIST, GDPR, SOC2, WebTrust).

Benefits

• Generous time off policies
• Top shelf benefits
• Education, wellness and lifestyle support