SOAR Automation engineer

Hexaware Technologies; Chennai District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Hexaware Technologies seeks a security automation specialist to design and maintain SOAR playbooks for automated incident response and SOC workflows. You will integrate tools across EDR, email security, threat intelligence, ticketing, and IAM, while optimizing SIEM use cases, rules, dashboards, and reports to strengthen detection and response capabilities.

Collaborating with SOC and Incident Response teams, you will continuously improve automation, coverage, and operational efficiency across

Qualifications

• Hands-on experience with SOAR platforms such as Microsoft Sentinel Automation, Cortex XSOAR, Splunk SOAR.
• Strong experience with SIEM solutions like Microsoft Sentinel, Splunk, QRadar.
• Knowledge of security operations, incident response, threat intelligence, and log analysis.
• Scripting experience in Python, PowerShell, or REST APIs for automation.
• Understanding of MITRE ATT&CK, security frameworks, and cybersecurity best practices.

Responsibilities

• Design, develop, and maintain SOAR playbooks for automated incident response and SOC workflows.
• Integrate security tools with SOAR solutions across EDR, email security, threat intel, ticketing, and IAM.
• Manage SIEM use cases, correlation rules, alerts, dashboards, and reporting.
• Analyze security events and investigate incidents to improve detection.
• Develop automation workflows to reduce manual effort and improve SOC efficiency.
• Collaborate with SOC, Threat Hunting, and Incident Response teams to enhance operations.

Skills

SOAR platforms

SIEM solutions

Security operations

Scripting (Python/PowerShell/REST)

MITRE ATT&CK & frameworks

Tools

Microsoft Sentinel Automation

Cortex XSOAR

Splunk SOAR

Swimlane

Job description

• Design, develop, and maintain SOAR playbooks for automated incident response and security operations workflows.
• Integrate security tools such as EDR, email security, threat intelligence, ticketing, and IAM platforms with SOAR solutions.
• Manage and optimize SIEM use cases, correlation rules, alerts, dashboards, and reporting.
• Analyze security events, investigate incidents, and improve detection capabilities.
• Develop automation workflows to reduce manual effort and improve SOC efficiency.
• Collaborate with SOC, Threat Hunting, and Incident Response teams to enhance security operations.

Required Skills:

• Hands-on experience with SOAR platforms (Microsoft Sentinel Automation, Cortex XSOAR, Splunk SOAR, Swimlane, etc.).
• Strong experience with SIEM solutions (Microsoft Sentinel, Splunk, QRadar, ArcSight, LogRhythm, etc.).
• Knowledge of security operations, incident response, threat intelligence, and log analysis.
• Scripting experience in Python, PowerShell, or REST APIs for automation and integrations.
• Understanding of MITRE ATT&CK, security frameworks, and cybersecurity best practices.