Walk-in | XSOAR / XSIAM Engineer - DM

Deloitte Shared Services India; Mumbai, Hyderabad; In loco; INR 1.500.000 - 2.200.000; Tempo pieno

Descrizione del lavoro

Deloitte Shared Services India is seeking an experienced security automation engineer to develop and optimize automation playbooks on Cortex XSOAR or similar SOAR platforms. You will collaborate with security analysts to automate detection, triage, investigation, and remediation of incidents.

The role requires strong scripting skills (Python/JS/PowerShell) and a deep understanding of incident response, threat intelligence, and network security.

Competenze

• Bachelor's or master's degree in Cybersecurity, IT, or related field.
• 1.5–8 years of experience in developing and optimizing automation playbooks on XSOAR or similar SOAR platforms.
• Strong understanding of incident response, threat intel, network security, and vulnerability management.
• Experience integrating playbooks with SIEMs, firewalls, TIPs, EDR tools, and ticketing systems.
• Ability to troubleshoot, optimize automation for performance and scale.

Mansioni

• Design and optimize automation playbooks for security operations.
• Collaborate with security analysts to automate detection, triage, investigation, and remediation of incidents.
• Integrate playbooks with SIEMs, firewalls, TIPs, EDRs, and ticketing systems.
• Test, troubleshoot, and optimize playbooks for reliability and performance.
• Document playbook logic and integrations for maintainability.
• Work with security engineers and IT teams to align playbooks with goals.

Conoscenze

Automation playbooks

SOAR platforms

Incident response

Threat intelligence

Python scripting

JavaScript

PowerShell

Cortex XSOAR

Collaboration

Formazione

Bachelor's/Master's in Cybersecurity or IT

Strumenti

Cortex XSOAR

Other SOAR platforms

Descrizione del lavoro

• 1.5yrs- 8years of experience into Develop and optimize automation playbooks within XSOAR platforms (Palo Alto XSOAR/XSIAM).
• Deep understanding of security concepts, including incident response, threat intelligence, network security, and vulnerability management.
• Utilize SOAR platforms to automate security processes and response activities.
• Collaborate with security analysts and incident responders to design playbooks that automate and orchestrate the detection, triage, investigation, and remediation of security incidents.
• Integrate playbooks with a variety of security tools such as SIEMs, firewalls, threat intelligence platforms, endpoint protection tools, and ticketing systems to improve the efficiency of the security operations center
• Test playbooks to ensure they are working as expected, troubleshoot issues, and optimize them for performance and scalability.
• Document playbook logic, workflows, and integrations to ensure that they are understandable and maintainable by other team members.
• Work closely with security engineers, analysts, and IT teams to align playbook development with security operations needs and organizational goals.
• Provide technical expertise in the configuration and optimization of SOAR tools.
• Assist in the evaluation and selection of SOAR technologies based on organizational needs.
• Document and maintain standard operating procedures for SOAR processes and playbooks.
• Experience with Cortex XSOAR (preferred) or other security orchestration platforms.
• Ability to troubleshoot issues, perform root cause analysis, and continuously optimize automation processes.
• Knowledge of scripting and automation (Python, JavaScript, PowerShell, etc.) for building playbooks and integrations.
• Master's or Bachelors degree in Cybersecurity, Information Technology, or related field.
• Location: Mumbai, Hyderabad