XSOAR Engineer - Consultant (Mumbai)

EMBARK SERVICES PRIVATE LIMITED; Thane; On-site; INR 600,000 - 1,200,000; Full time

Job summary

EMBARK SERVICES PRIVATE LIMITED in Thane is seeking a proactive SIEM/SOAR specialist to develop and maintain automated playbooks, focusing on incident response workflows and security operations. The role emphasizes building custom SIEM content and integrating tools to streamline detection, analysis, and response.

Ideal candidates have 1-4 years of hands-on SOAR experience (Palo Alto XSOAR preferred), solid security concepts, and a collaborative mindset to work with security engineers and IT

Qualifications

• 1-4 years of experience developing and optimizing automation playbooks within SOAR platforms (preferably Palo Alto XSOAR).
• Deep understanding of security concepts including incident response, threat intelligence, network security, and vulnerability management.
• Utilize SOAR platforms to automate security processes and response activities.
• Collaborate with security analysts and incident responders to design playbooks that automate and orchestrate detection, triage, investigation, and remediation of incidents.
• Integrate playbooks with SIEMs, firewalls, threat intel platforms, endpoints, and ticketing systems to improve SOC efficiency.
• Test playbooks to ensure functionality, troubleshoot issues, and optimize performance and scalability.
• Document playbook logic, workflows, and integrations for maintainability.
• Work with security engineers, analysts, and IT to align development with operational needs and goals.
• Provide technical expertise in configuring and optimizing SOAR tools.
• Assist in evaluating and selecting SOAR technologies based on organizational needs.
• Document and maintain standard operating procedures for SOAR processes and playbooks.
• Experience with Cortex XSOAR or other SOAR platforms.

Responsibilities

• Develop, maintain, and enhance automated playbooks in SOAR platforms to streamline incident response workflows.
• Design, implement, and manage custom SOAR content supporting security monitoring and threat detection.
• Ensure SOAR optimization to detect, analyze, and respond to threats effectively.
• Test playbooks, troubleshoot issues, and optimize them for performance and scalability.
• Document playbook logic, workflows, and integrations for maintainability.
• Collaborate with security engineers, analysts, and IT teams to align playbook development with operational needs and organizational goals.
• Provide technical expertise in the configuration and optimization of SOAR tools.
• Assist in the evaluation and selection of SOAR technologies based on organizational needs.
• Document and maintain SOPs for SOAR processes and playbooks.

Skills

SOAR platforms

Playbook design

Incident response

Threat intelligence

Security operations

Automation testing

System integration

Palo Alto XSOAR

Education

Bachelor’s or Master’s degree in Cybersecurity/IT or related field

Tools

Cortex XSOAR

SIEM

Endpoint protection tools

Job description

EMBARK SERVICES PRIVATE LIMITED | Full time

Responsibilities

• Develop, maintain, and enhance automated playbooks in SOAR platforms to streamline and improve incident response workflows.
• Proactive SIEM Content Management Specialist to join our security operations team. The ideal candida
• Will be responsible for designing, implementing, and managing custom SIEM content that supports the organization's security monitoring and threat detection capabilities.
• Ensuring that our SIEM system is optimized to detect, analyze, and respond to potential security threats effectively and efficiently.

Requirements

• 1-4 years of experience into Develop and optimize automation playbooks within SOAR platforms (preferably Palo Alto XSOAM).
• Deep understanding of security concepts, including incident response, threat intelligence, network security, and vulnerability management.
• Utilize SOAR platforms to automate security processes and response activities.
• Collaborate with security analysts and incident responders to design playbooks that automate and orchestrate the detection, triage, investigation, and remediation of security incidents.
• Integrate playbooks with a variety of security tools such as SIEMs, firewalls, threat intelligence platforms, endpoint protection tools, and ticketing systems to improve the efficiency of the security operations center
• Test playbooks to ensure they are working as expected, troubleshoot issues, and optimize them for performance and scalability.
• Document playbook logic, workflows, and integrations to ensure that they are understandable and maintainable by other team members.
• Work closely with security engineers, analysts, and IT teams to align playbook development with security operations needs and organizational goals.
• Provide technical expertise in the configuration and optimization of SOAR tools.
• Assist in the evaluation and selection of SOAR technologies based on organizational needs.
• Document and maintain standard operating procedures for SOAR processes and playbooks.
• Experience with Cortex XSOAR (preferred) or other security orchestration platforms.
• Ability to troubleshoot issues, perform root cause analysis, and continuously optimize automation processes.
• Master's or Bachelor’s degree in Cybersecurity, Information Technology, or related field.