SOAR Engineer/ Lead (Palo Alto SOAR/ Cortex XSOAR)

iFocal Solutions Pvt Ltd; Pune District; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

iFocal Solutions Pvt Ltd in Pune seeks an experienced SOAR Engineer/Lead to design, deploy and optimize SOAR platforms (Palo Alto XSOAR, Splunk Phantom) to strengthen cybersecurity operations.

You will build scalable playbooks, integrate SIEM and EDR, automate response workflows, and collaborate with SOC/IR teams to reduce MTTR while ensuring regulatory compliance.

Qualifications

• 5+ years in cybersecurity with at least 3 years in SOAR engineering or architecture.
• Hands-on experience with SOAR platforms like Cortex XSOAR Splunk Phantom IBM SOAR.
• Familiarity with SIEM EDR threat intelligence and ITSM tools.
• Experience in regulated environments (e.g., BFSI APAC compliance) is a plus.

Responsibilities

• Architect and implement SOAR solutions across hybrid environments.
• Design scalable playbooks and workflows to automate triage enrichment and response actions.
• Integrate SOAR with SIEM, EDR threat intelligence and ticketing systems.
• Collaborate with SOC and IR teams to define use cases and automate repetitive tasks to reduce MTTR.
• Lead root cause analysis and post-incident reviews to improve response strategies.

Skills

Playbook Development

Automation & Orchestration

Root cause analysis

Tools

Cortex XSOAR

Splunk Phantom

IBM SOAR

SIEM

ITSM tools

Job description

About the job

About Position: SOAR Engineer / Lead (Palo Alto SOAR / Cortex XSOAR)

Job Type: Full-time

Department: Cybersecurity / Security Architecture

Location: Pune (5 days from office) – 2 PM to 11 PM IST

Role Summary

The SOAR Engineer will lead the design deployment and optimization of SOAR (Security Orchestration Automation and Response) platforms to enhance cybersecurity operations. This role is pivotal in automating incident response integrating threat intelligence and streamlining security workflows across enterprise environments.

Mandatory skills

• Cortex XSOAR/ Palo Alto XSOAR
• Playbook Development (XSOAR Playbooks, Custom Playbook Development, Workflow Automation0
• Integration & Automation - Integrate SOAR with SIEM (e.g. Splunk QRadar)

Key Responsibilities

• Architect and implement SOAR solutions (e.g. Cortex XSOAR Splunk Phantom IBM SOAR) across hybrid environments.
• Design scalable playbooks and workflows to automate triage enrichment and response actions.

Integration & Automation

• Integrate SOAR with SIEM (e.g. Splunk QRadar) EDR threat intelligence and ticketing systems.
• Collaborate with SOC and IR teams to define use cases automate repetitive tasks and reduce MTTR.
• Lead root cause analysis and post-incident reviews to improve response strategies.

Governance & Documentation

• Maintain detailed documentation for playbooks SOPs and integration guides.
• Ensure compliance with internal security policies and external regulatory frameworks.
• Train SOC analysts and engineers on SOAR capabilities and best practices.
• Act as a subject matter expert during onboarding and platform transitions.

Required Skills & Experience

• 5+ years in cybersecurity with at least 3 years in SOAR engineering or architecture.
• Hands-on experience with SOAR platforms like Cortex XSOAR Splunk Phantom IBM SOAR.
• Familiarity with SIEM EDR threat intelligence and ITSM tools.
• Experience in regulated environments (e.g., BFSI APAC compliance) is a plus.