SOAR Automation Engineer for a 24/7 SOC

Sekuro Asia - An Insight Company; Philippines; Sur place; PHP 1 000 000 - 1 700 000; Plein temps

Résumé du poste

SekuroAsia - An Insight Company is seeking a SOAR Engineer to join our busy Security Engineering team. Reporting to the Engineering Manager, you will design, build and maintain automation workflows powering our round-the-clock Security Operations Centre and deliver tangible value to our clients.

You should have hands-on experience with Swimlane or other SOAR platforms, strong Python scripting skills, and a solid grasp of REST APIs and authentication methods.

Qualifications

• Two years in a security-focused role such as SOC, incident response or security engineering.
• Hands-on experience building playbooks in at least one SOAR platform.

Responsabilités

• Design, develop and maintain SOAR playbooks for incident response and security operations tasks.
• Refactor and optimise existing automation to improve reliability, performance and re-use.
• Integrate SOAR with SIEM, EDR, ticketing, cloud and network tools via REST APIs, webhooks and SDKs.
• Translate complex client security use cases into automated workflows with SOC analysts and Detection Engineering.
• Act as SME for SOAR during incident triage and provide rapid troubleshooting for playbooks.

Connaissances

SOAR

Swimlane

Python

REST APIs

Incident response

Documentation

Outils

Swimlane

Splunk SOAR

Palo Alto XSOAR

Microsoft Sentinel

Tines

Description du poste

SekuroAsia - An Insight Company is seeking a SOAR Engineer to join our busy Security Engineering team. Reporting to the Engineering Manager, you will design, build and maintain automation workflows powering our round-the-clock Security Operations Centre and deliver tangible value to our clients.

You should have hands-on experience with Swimlane or other SOAR platforms, strong Python scripting skills, and a solid grasp of REST APIs and authentication methods.