Join our cybersecurity team to enhance defenses and protect critical assets. We focus on building secure, vigilant, and resilient systems, managing cyber risks effectively to unlock new opportunities. Integrate cybersecurity from the outset of strategy development for superior information and technology risk management. Learn more about our Cybersecurity initiatives.

This role involves developing, maintaining, and optimizing automated playbooks within SOAR platforms to streamline incident response workflows. You will be instrumental in creating and managing custom SIEM content that bolsters the organization's threat detection capabilities, ensuring efficient and effective response to security threats.

Develop and refine automated playbooks for SOAR platforms, focusing on enhancing incident response efficiency. Design, implement, and manage custom SIEM content to support robust security monitoring and threat detection. Optimize SIEM systems for the timely detection, analysis, and response to potential security threats. Collaborate with security analysts to automate and orchestrate the entire incident lifecycle, from detection to remediation. Integrate playbooks with various security tools like SIEMs, firewalls, and endpoint protection for enhanced SOC efficiency. Test and troubleshoot playbooks, optimizing them for performance and scalability. Document playbook logic and workflows for clarity and maintainability by the team. Align playbook development with security operations needs and organizational goals through collaboration with IT and security teams.

Possess 1-3 years of experience in developing and optimizing automation playbooks within SOAR platforms, with a preference for Palo Alto XSOAR/XSIAM. Demonstrate a deep understanding of core security concepts including incident response, threat intelligence, network security, and vulnerability management. Proficiency in utilizing SOAR platforms to automate security processes and response activities is essential. Experience with scripting languages such as Python, JavaScript, or PowerShell for building playbooks and integrations is required. A Master's or Bachelor's degree in Cybersecurity, Information Technology, or a related field is necessary. Ability to troubleshoot, perform root cause analysis, and continuously improve automation processes. Familiarity with integrating playbooks across diverse security tools is a significant advantage.