SOAR Engineer/ Lead (Palo Alto SOAR/ Cortex XSOAR)

Ifocal Solutions; Pune District; On-site; INR 1,800,000 - 2,600,000; Full time

Job summary

Ifocal Solutions in Pune is seeking an experienced SOAR Engineer/Lead to design, deploy, and optimize Cortex XSOAR-based security orchestration and response platforms across hybrid environments.

You will architect scalable playbooks, integrate with SIEM, EDR, and ITSM tools, and automate incident response to reduce MTTR. A hands-on scripting background and expertise in regulated environments are highly valued.

Qualifications

• 5+ years in cybersecurity with at least 3 years in SOAR engineering or architecture.
• Hands-on experience with SOAR platforms like Cortex XSOAR Splunk Phantom IBM SOAR.
• Strong scripting skills (Python PowerShell JavaScript).
• Familiarity with SIEM EDR threat intelligence and ITSM tools.
• Experience in regulated environments (e.g., BFSI APAC compliance) is a plus.

Responsibilities

• Architect and implement SOAR solutions (e.g. Cortex XSOAR Splunk Phantom IBM SOAR) across hybrid environments.
• Design scalable playbooks and workflows to automate triage enrichment and response actions.
• Integrate SOAR with SIEM, EDR, threat intelligence and ticketing systems.
• Develop automation scripts using Python PowerShell or JavaScript to support custom integrations.
• Lead root cause analyses and post-incident reviews to improve response strategies.

Job description

About the job

About Position: SOAR Engineer/ Lead (Palo Alto SOAR/ Cortex XSOAR)

Job Type: Full-time

Department: Cybersecurity / Security Architecture

Location: Pune (5 days from office) 2 PM to 11 PM IST

Role Summary

The SOAR Engineer will lead the design deployment and optimization of SOAR (Security Orchestration Automation and Response) platforms to enhance cybersecurity operations. This role is pivotal in automating incident response integrating threat intelligence and streamlining security workflows across enterprise environments.

Mandatory skills

• Cortex XSOAR/ Palo Alto XSOAR
• Playbook Development (XSOAR Playbooks, Custom Playbook Development, Workflow Automation0
• Scripting & Development (Python)
• Integration & Automation - Integrate SOAR with SIEM (e.g. Splunk QRadar)

Key Responsibilities

SOAR Platform Architecture & Deployment

• Architect and implement SOAR solutions (e.g. Cortex XSOAR Splunk Phantom IBM SOAR) across hybrid environments.
• Design scalable playbooks and workflows to automate triage enrichment and response actions.

Integration & Automation

• Integrate SOAR with SIEM (e.g. Splunk QRadar) EDR threat intelligence and ticketing systems.
• Develop automation scripts using Python PowerShell or JavaScript to support custom integrations.

Incident Response Enablement

• Collaborate with SOC and IR teams to define use cases automate repetitive tasks and reduce MTTR.
• Lead root cause analysis and post-incident reviews to improve response strategies.

Governance & Documentation

• Maintain detailed documentation for playbooks SOPs and integration guides.
• Ensure compliance with internal security policies and external regulatory frameworks.

Mentorship & Knowledge Sharing

• Train SOC analysts and engineers on SOAR capabilities and best practices.
• Act as a subject matter expert during onboarding and platform transitions.

Required Skills & Experience

• 5+ years in cybersecurity with at least 3 years in SOAR engineering or architecture.
• Hands-on experience with SOAR platforms like Cortex XSOAR Splunk Phantom IBM SOAR.
• Strong scripting skills (Python PowerShell JavaScript).
• Familiarity with SIEM EDR threat intelligence and ITSM tools.
• Experience in regulated environments (e.g., BFSI APAC compliance) is a plus.