T&T I Cyber-D&R I Manager I SOAR -Security Orchestration, Automation and Response | Bengaluru (Bengaluru, IN)
Deloitte
Deloitte
Join a leading team focused on preventing cyberattacks and safeguarding critical assets. We empower organizations to be secure, vigilant, and resilient by embedding cyber risk management into strategic development. Our approach ensures effective management of information and technology risks, enabling new opportunities.
This role involves developing and designing the overall Security Orchestration, Automation, and Response (SOAR) architecture, defining integration strategies with existing security tools, and ensuring the SOAR system's scalability to meet evolving security operations needs.
Design and develop comprehensive SOAR architectures tailored to specific security and automation requirements. Establish clear integration strategies with current security tools and platforms for seamless operation. Ensure the SOAR system can scale effectively to accommodate the growing demands of security operations. Create and maintain dynamic security playbooks to automate incident response processes. Analyze security incidents to identify and implement automation opportunities for enhanced efficiency. Continuously refine existing playbooks to boost performance and effectiveness. Conduct rigorous testing and validation of playbooks to guarantee accuracy and reliability. Map intricate data flows between various systems, ensuring data consistency across the board. Develop custom scripts and connectors to facilitate complex integrations. Implement robust error handling and troubleshooting mechanisms for all integrations. Provide essential technical guidance and mentorship to the team members.
A minimum of 6 years of experience in the Cyber domain is required. Palo Alto XSOAR certification is mandatory for this position. Possession of a Bachelor's or Master's degree in Computer Science, Information Security, or a related field is necessary. Proven ability to create and maintain security playbooks for automating incident response procedures. Demonstrated experience in analyzing security incidents and identifying automation opportunities. Skilled in continuously improving existing playbooks for greater efficiency and effectiveness. Experience in conducting thorough testing and validation of playbooks to ensure accuracy. Proficiency in mapping data flows between different systems and ensuring data consistency. Ability to create custom scripts and connectors to facilitate integrations. Expertise in implementing robust error handling and troubleshooting mechanisms for integrations. Capability to provide technical guidance and mentorship to the team.
Deloitte
Cybersecurity