SOAR Engineer

Embarkgcc Services; Mumbai; On-site; INR 1,000,000 - 1,800,000; Full time

Job summary

Embarkgcc Services in Mumbai seeks a security automation professional to develop, maintain and enhance automated playbooks in SOAR platforms, streamlining incident response workflows and improving security operations. The role focuses on designing and managing custom SIEM content, integrating with SIEMs, firewalls, threat intel platforms, endpoint protection, and ticketing systems to boost SOC efficiency.

Collaborate with analysts, test and document playbooks to ensure reliability and

Qualifications

• 1-7 years of experience developing and optimizing automation playbooks in SOAR platforms (preferably Palo Alto XSOAR/XSIAM).
• Strong understanding of security concepts including incident response, threat intelligence, network security and vulnerability management.
• Experience using SOAR to automate security processes and response activities.
• Ability to collaborate with security analysts to design playbooks that automate detection, triage, investigation and remediation of incidents.

Responsibilities

• Develop, maintain, and enhance automated playbooks in SOAR platforms to streamline incident response workflows.
• Design and manage custom SIEM content that supports security monitoring and threat detection.
• Test playbooks, troubleshoot issues, and optimize performance and scalability.
• Document playbook logic, workflows, and integrations for maintainability.

Skills

SOAR automation

Incident response

Threat intelligence

Security operations

Collaboration

Tools

Palo Alto XSOAR

XSIAM

SIEMs

Ticketing systems

Job description

Role & responsibilities:

• Develop, maintain, and enhance automated playbooks in SOAR platforms to streamline and improve incident response workflows.
• Proactive SIEM Content Management Specialist to join our security operations team. The ideal candida
• Will be responsible for designing, implementing, and managing custom SIEM content that supports the organization's security monitoring and threat detection capabilities.

Preferred candidate profile

• 1-7 years of experience into Develop and optimize automation playbooks within SOAR platforms (preferably Palo Alto XSOAR/XSIAM).
• Deep understanding of security concepts, including incident response, threat intelligence, network security, and vulnerability management.
• Utilize SOAR platforms to automate security processes and response activities.
• Collaborate with security analysts and incident responders to design playbooks that automate and orchestrate the detection, triage, investigation, and remediation of security incidents.
• Integrate playbooks with a variety of security tools such as SIEMs, firewalls, threat intelligence platforms, endpoint protection tools, and ticketing systems to improve the efficiency of the security operations center
• Test playbooks to ensure they are working as expected, troubleshoot issues, and optimize them for performance and scalability.
• Document playbook logic, workflows, and integrations to ensure that they are understandable and maintainable by other team members.