SOAR Automation engineer

Hexaware Technologies; Tamil Nadu; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Hexaware Technologies in Chennai is seeking an experienced security operations professional with 8–12 years of hands-on expertise in designing, implementing, and maintaining SOAR playbooks for automated incident response and SOC efficiency.

You will integrate tools across EDR, email security, threat intel, ticketing, and IAM with SOAR, while managing SIEM use cases and incident detection improvements. Proficiency in Python/PowerShell or REST APIs will enable automation and rapid integrations.

Qualifications

• Hands-on experience with SOAR platforms (e.g., Microsoft Sentinel Automation, Cortex XSOAR, Splunk SOAR, Swimlane).
• Strong experience with SIEM solutions (Microsoft Sentinel, Splunk, QRadar, ArcSight, LogRhythm).
• Knowledge of security operations, incident response, threat intelligence, and log analysis.
• Scripting experience in Python, PowerShell, or REST APIs for automation and integrations.
• Understanding of MITRE ATT&CK, security frameworks, and cybersecurity best practices.

Responsibilities

• Design, develop, and maintain SOAR playbooks for automated incident response and security workflows.
• Integrate security tools with SOAR solutions (EDR, email security, threat intel, ticketing, IAM).
• Manage and optimize SIEM use cases, correlation rules, alerts, dashboards, and reporting.
• Analyze security events, investigate incidents, and improve detection capabilities.
• Develop automation workflows to reduce manual effort and improve SOC efficiency.
• Collaborate with SOC, Threat Hunting, and Incident Response teams to enhance security operations.

Skills

SOAR platforms

SIEM

Security operations

Automation scripting

MITRE ATT&CK

Tools

Microsoft Sentinel Automation

Cortex XSOAR

Splunk SOAR

Swimlane

Job description

Experience: 8-12 years

Work location: Chennai

Roles and responsibilities:

• Design, develop, and maintain SOAR playbooks for automated incident response and security operations workflows.
• Integrate security tools such as EDR, email security, threat intelligence, ticketing, and IAM platforms with SOAR solutions.
• Manage and optimize SIEM use cases, correlation rules, alerts, dashboards, and reporting.
• Analyze security events, investigate incidents, and improve detection capabilities.
• Develop automation workflows to reduce manual effort and improve SOC efficiency.
• Collaborate with SOC, Threat Hunting, and Incident Response teams to enhance security operations.

Required Skills:

• Hands-on experience with SOAR platforms (Microsoft Sentinel Automation, Cortex XSOAR, Splunk SOAR, Swimlane, etc.).
• Strong experience with SIEM solutions (Microsoft Sentinel, Splunk, QRadar, ArcSight, LogRhythm, etc.).
• Knowledge of security operations, incident response, threat intelligence, and log analysis.
• Scripting experience in Python, PowerShell, or REST APIs for automation and integrations.
• Understanding of MITRE ATT&CK, security frameworks, and cybersecurity best practices.