XSOAR Engineer - Consultant / Assistant Manager

Embarkgcc Services; Mumbai, Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Embarkgcc Services in Mumbai/Hyderabad seeks an XSOAR Engineer Consultant to design and optimize security automation workflows. The role focuses on SOAR playbooks, incident response automation, API integrations, and collaboration with SOC teams. Experience with XSOAR/XSIAM and scripting in Python/JavaScript/PowerShell is required.

A Bachelor's or Master's in Computer Science or Information Security is preferred. This position offers hands-on work with clients and opportunities for progression.

Qualifications

• Hands-on experience with SOAR platforms, preferably Palo Alto Cortex XSOAR/XSIAM.
• Strong SOAR playbook development and security automation background.
• Experience in incident response, threat intel, network security, vulnerability management.
• Experience integrating security tools via APIs and connectors.
• Proficient in Python, JavaScript, or PowerShell scripting.
• Ability to troubleshoot automation workflows and perform root-cause analysis.
• Understanding SOC operations and threat detection.
• Excellent documentation and collaboration skills.

Responsibilities

• Develop, maintain, and optimize automated playbooks within SOAR platforms.
• Automate incident detection, triage, investigation, escalation, and remediation.
• Integrate SOAR playbooks with SIEMs, firewalls, endpoint tools, threat intel, and ticketing systems.
• Develop and maintain automation scripts using Python, JavaScript, PowerShell.
• Configure and optimize SOAR platforms, troubleshoot playbook failures, and improve performance.
• Collaborate with SOC analysts, security engineers, and IR teams to identify automation opportunities.
• Integrate threat intel feeds and automate IOC enrichment.
• Test and validate playbooks, troubleshoot integrations, ensure reliable execution.
• Document playbook workflows, integrations, SOPs, and automation processes.
• Support SIEM content management activities, including use cases and detection content.

Skills

SOAR platforms

Playbook development

Incident response automation

API integrations

Scripting: Python/PowerShell/Java

Troubleshooting workflows

SOC collaboration

Education

Bachelor's or Master's degree in Computer Science or related field

Job description

XSOAR Engineer Consultant / Assistant Manager

Experience: 110 years
Locations: Mumbai / Hyderabad

Role Overview

We are looking for skilled XSOAR Engineers with experience in security automation, SOAR playbook development, and incident response automation. The ideal candidates will have hands-on experience with Palo Alto Cortex XSOAR/XSIAM or other SOAR platforms, along with scripting and security tool integration capabilities.

Key Responsibilities

• Develop, maintain, and optimize automated playbooks within SOAR platforms to streamline security operations and incident response.


• Automate incident detection, triage, investigation, escalation, and remediation workflows.


• Integrate SOAR playbooks with SIEMs, firewalls, endpoint protection tools, threat intelligence platforms, and ticketing systems.


• Develop and maintain automation scripts using Python, JavaScript, PowerShell, or similar scripting languages.


• Configure and optimize SOAR platforms, troubleshoot playbook failures, perform root cause analysis, and improve automation performance.


• Collaborate with SOC analysts, security engineers, and incident response teams to identify automation opportunities and implement security use cases.


• Integrate threat intelligence feeds and automate indicators of compromise (IOC) enrichment.


• Test and validate playbooks, troubleshoot integration issues, and ensure reliable execution.


• Document playbook workflows, integrations, standard operating procedures, and automation processes.


• Support SIEM content management activities, including security monitoring use cases, detection content, and threat detection optimization, where applicable.

Required Skills

• Hands-on experience with SOAR platforms, preferably Palo Alto Cortex XSOAR/XSIAM.


• Strong experience in SOAR playbook development and security process automation.


• Knowledge of incident response, threat intelligence, network security, and vulnerability management.


• Experience integrating security tools through APIs and platform connectors.


• Scripting knowledge in Python, JavaScript, PowerShell, or similar languages.


• Ability to troubleshoot automation workflows and perform root cause analysis.


• Understanding of SOC operations, security incident handling, and threat detection.


• Strong problem-solving, documentation, and collaboration skills.

Education

Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Security, Information Technology, or a related field.