2 days ago
Doha, QatarSenior
Responsibilities
- Act as the technical subject matter expert and primary point of contact for security automation, orchestration, playbooks, Python automation, API-based automation, and incident-response lifecycle automation.
- Develop, implement, and execute standard procedures for SOAR platform administration, including content, change, version, patch, and lifecycle management.
- Design, deploy, maintain, and mature SOAR platforms, SOC playbooks, workflow automations, and security use cases.
- Integrate SOAR platforms with detection, response, security, and ITSM tools, including building and customizing integrations and playbooks.
- Develop scripts, pipelines, and playbooks to automate detection and response workflows, enrich logs and alerts, and triage and respond to security incidents.
- Assess and improve SOC processes and workflows while collaborating with SOC and Security Engineering teams.
- Assist with client setup, transition, and onboarding, and serve as the primary point of contact for managed security service clients.
Requirements
- Proven experience with SOAR technologies such as Palo Alto Cortex XSOAR, Splunk SOAR/Phantom, Microsoft Sentinel Automation/Logic Apps, or IBM Resilient.
- Knowledge of security architecture, tool integration, API development and automation, incident-response processes, and common SOC workflows.
- Experience using Python for automation and working with REST APIs, JSON, HTML, CSS, JavaScript, and XML.
- Experience developing cybersecurity operations dashboards and reports.
- Experience with operating-system internals on Linux and Windows platforms.
- Proven experience building or customizing integrations and playbooks with firewalls, EDR, SIEM, and ticketing tools such as Palo Alto, Fortinet, CrowdStrike, SentinelOne, Splunk, QRadar, Sentinel, ServiceNow, and Jira.
- Experience integrating SOAR platforms with ITSM systems such as Jira and ServiceNow.
- Relevant degree and one or more SOAR-platform-related certificates.
- Familiarity with the region and experience working for an MSSP or MDR provider are desirable.
- Strong problem-solving skills, ability to work with minimal oversight, and exceptional written and verbal communication skills.
Tech Stack
Categories
