Responsibilities
- Design, develop, maintain, and scale SOAR playbooks, workflows, and integrations across the MDR platform.
- Build and operate automation for alert triage, enrichment, investigation, containment, and response.
- Define automation strategy and scale high-impact, high-volume SOC processes.
- Develop integrations across SIEM, EDR/XDR, identity, cloud, and ticketing systems using APIs and scripting.
- Partner with MDR analysts, incident response, threat hunting, and engineering teams to translate workflows into automation.
- Contribute tooling to incident response and root-cause analyses that improves investigation speed, accuracy, and consistency.
- Evaluate AI-assisted workflows and other data-driven automation capabilities.
- Own automation KPIs, dashboards, reporting, workflow reliability, integration health, logging, alerting, and observability.
- Continuously optimize automation based on operational data, feedback, and performance.
Requirements
- At least 4 years of experience in security operations, MDR, incident response, or security engineering.
- At least 2–3 years of hands-on experience with SOAR platforms and security automation.
- Experience owning and operating production-grade automation workflows in a SOC or MDR environment.
- Strong understanding of SOC operations, alert triage, escalation workflows, and incident response.
- Experience with enterprise security technologies including SIEM, SOAR, EDR/XDR, and IAM/AD.
- Strong scripting and development skills with Python, PowerShell, and Bash, including API and integration development.
- Experience with version control using Git and deploying automation at scale.
- Strong analytical, problem-solving, communication, and cross-functional collaboration skills.
- Preferred experience with AI-enhanced automation, large-scale workflow orchestration, high-volume MDR/SOC environments, threat hunting, or detection engineering.
Benefits
- Fully remote position based in India.
- Standard daytime business hours while collaborating across regions and time zones for a global 24/7 MDR service.
About Varonis
Varonis unifies AI-native data security, AI security and governance, and behavior-based threat detection. Core offerings include the Varonis Data Security Platform for AI-native data security, Varonis Atlas for safe and trustworthy AI, Varonis Next-Gen DAM for database security, and Varonis Interceptor for preventing AI-powered social engineering threats. Backed by 24×7×365 expert-led detection and response, Varonis enables organizations to confidently adopt AI, reduce data exposure, and simplify security operations in an evolving threat landscape. Trusted by thousands of leading global enterprises, Varonis is the partner security teams rely on to automatically and effortlessly protect their most critical data and safely accelerate AI innovation.