1 day ago
Chennai, IndiaMid Level
Responsibilities
- Develop SOAR playbooks, workflows, and automations for alert triage, enrichment, containment, and remediation.
- Build reusable automation components, scripts, integrations, API connections, webhooks, and event-driven triggers.
- Integrate SOAR with SIEM, EDR, TIP, cloud-native security tools, case management systems, and Microsoft and Google security ecosystems.
- Monitor automation performance, exceptions, reliability, testing, quality assurance, documentation, and system behavior.
- Support AI/ML-driven enrichment, correlation logic, anomaly detection, and decision-support workflows.
- Translate SOPs, response runbooks, and detection workflows into consistent, auditable, and compliant automated processes.
- Collaborate with Detection Engineering, Incident Response, Threat Hunting, and Threat Intelligence teams on security automation use cases.
- Contribute to post-incident reviews, tool evaluations, optimization initiatives, automation backlogs, and continuous improvement.
Requirements
- Experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, or Chronicle SOAR.
- Proficiency in Python and/or PowerShell for automation development.
- Strong understanding of REST APIs, JSON, and event-driven automation.
- Experience integrating SIEM, EDR, TIP, and cloud-native security tools.
- Understanding of SOC, Incident Response, Threat Hunting, and Detection Engineering workflows.
- Ability to convert operational requirements and SOPs into engineered automation.
- Familiarity with playbooks, runbooks, and security process governance.
- Experience working with cross-functional technical teams in security operations.
- Preferred qualifications include SOAR platform certifications, GIAC certifications such as GMON, GCTI, GCIH, or GCDA, Python or scripting certifications, and Azure or GCP cloud certifications.
Benefits
- Opportunity to work with passionate, inspired people and deliver projects at significant scale.
- Challenging and stimulating work with creative problem-solving opportunities.
- Hybrid work arrangement with teams generally in the office around four days per week.
- Accommodations or flexibility may be discussed with the hiring team.
Tech Stack
Categories
About WPP
WPP is a public advertising and marketing services group that provides creative, media, data, and public relations solutions to global brands. It operates agency networks including Ogilvy, VML/GroupM, Grey, and AKQA, generating revenue from agency fees and media investment management. Founded in 1971 and headquartered in London, it serves clients across 100+ markets worldwide.