Join our cybersecurity team dedicated to protecting organizations from cyberattacks and safeguarding valuable assets. We foster a secure, vigilant, and resilient environment, focusing not just on preventing and responding to threats, but on managing cyber risk to unlock new opportunities. Embed cyber risk into strategy development for effective information and technology risk management.

This role involves developing, maintaining, and enhancing automated playbooks within SOAR platforms to streamline and improve incident response workflows, and proactively managing SIEM content to enhance our security monitoring and threat detection capabilities.

Develop, maintain, and enhance automated playbooks within SOAR platforms to streamline incident response.

Design, implement, and manage custom SIEM content for robust security monitoring and threat detection.

Optimize the SIEM system for effective and efficient detection, analysis, and response to security threats.

Automate security processes and response activities using SOAR platforms.

Collaborate with security analysts and incident responders to design playbooks that automate and orchestrate incident detection, triage, investigation, and remediation.

Integrate playbooks with various security tools like SIEMs, firewalls, threat intelligence platforms, and endpoint protection.

Test, troubleshoot, and optimize playbooks for performance and scalability.

Document playbook logic, workflows, and integrations for team understanding and maintainability.

Align playbook development with security operations needs and organizational goals through collaboration with engineers, analysts, and IT teams.

1-4 years of experience in developing and optimizing automation playbooks within SOAR platforms, with a preference for Palo Alto XSOAR/XSIAM.

Possess a deep understanding of security concepts including incident response, threat intelligence, network security, and vulnerability management.

Proficient in using SOAR platforms to automate security processes and response activities.

Skilled in integrating playbooks with diverse security tools such as SIEMs, firewalls, threat intelligence platforms, endpoint protection tools, and ticketing systems.

Experienced in testing playbooks, troubleshooting issues, and optimizing them for performance and scalability.

Ability to document playbook logic, workflows, and integrations clearly.

Knowledge of scripting and automation languages like Python, JavaScript, or PowerShell for building playbooks and integrations.

Academic qualification in Cybersecurity, Information Technology, or a related field, including a Master's or Bachelor's degree.