Responsibilities
- Design, develop, maintain, and scale SOAR playbooks, workflows, and integrations across the MDR platform.
- Build production-grade automation for alert triage, enrichment, investigation, containment, and response.
- Define automation strategy and identify high-impact, high-volume SOC processes for automation.
- Develop integrations across SIEM, EDR/XDR, identity, cloud, and ticketing systems using APIs and scripting.
- Partner with MDR analysts, incident responders, threat hunters, and engineering teams to translate workflows into scalable automation.
- Own automation KPIs, dashboards, reporting, monitoring, logging, alerting, and observability for production automation systems.
- Contribute to incident response and root-cause analyses by delivering tooling that improves investigation speed, accuracy, and consistency.
- Evaluate and implement AI-assisted workflows and data-driven automation capabilities.
Requirements
- At least 4 years of experience in security operations, MDR, incident response, or security engineering.
- At least 2–3 years of hands-on experience with SOAR platforms and security automation.
- Proven experience owning and operating production-grade automation workflows in a SOC or MDR environment.
- Strong understanding of SOC operations, alert triage, escalation workflows, and incident response.
- Experience with enterprise security technologies including SIEM, SOAR, EDR/XDR, and IAM/AD.
- Strong scripting and development skills in Python, PowerShell, and Bash, with experience building APIs and integrations.
- Experience with version control using Git and deploying automation at scale.
- Strong analytical, problem-solving, communication, and cross-functional collaboration skills.
- Nice-to-have experience includes AI-enhanced automation, large-scale workflow orchestration, high-volume MDR/SOC environments, threat hunting, or detection engineering.
Benefits
- Fully remote position based in India.
- Standard daytime business hours with collaboration across multiple regions and time zones for continuous 24/7 MDR coverage.
About Varonis
Varonis unifies AI-native data security, AI security and governance, and behavior-based threat detection. Core offerings include the Varonis Data Security Platform for AI-native data security, Varonis Atlas for safe and trustworthy AI, Varonis Next-Gen DAM for database security, and Varonis Interceptor for preventing AI-powered social engineering threats. Backed by 24×7×365 expert-led detection and response, Varonis enables organizations to confidently adopt AI, reduce data exposure, and simplify security operations in an evolving threat landscape. Trusted by thousands of leading global enterprises, Varonis is the partner security teams rely on to automatically and effortlessly protect their most critical data and safely accelerate AI innovation.