Job Description

Job Title : Senior Specialist(SOAR - PaloAlto/ Microsoft Sentinel ) Locations : Mumbai / Pune / Bangalore / Hyderabad / Chennai / Delhi / Indore / Nagpur / Bhubaneshwar / Jaipur / Kolkata Experience : 8-12 years Skills : SOAR - PaloAlto/ Microsoft Sentinel : Experience: 6-8 years in SOAR. Hands-on experience with SOAR solutions preferably Cortex. Provide guidance on tuning playbook created by IR SOC team- Create/Modify Automations script Java Python to achieve required outcome- Integrate threat intelligence feeds and sources into XSOAR to enhance the detection and response capabilities -Handle ad-hoc field-mapping, layout-modification requests Passion for aligning technical solutions to business needs and ability to think out of the box. Strong understanding of security architecture, tool integration, API development and automation. Assess, design, and improve processes and workflows with a focus on integrating automation through Security Orchestration, Automation and Response (SOAR) tools and technologies. Implement new automation and ensure continued compatibility with existing detection and response tools. Integrate new logging sources and build playbooks to properly triage and respond to security incidents while reducing the time needed to analyze each event. Develop custom scripts to automate current detection and response workflows. Experience using Python for the purpose of automating security operations and incident response processes. Work closely with the Security Operations Center (SOC) and Security Engineering teams to improve existing automation and deliver resilient security solutions. Understanding of common SOC and SOAR processes and workflows. Expert proficiency in Python scripting Working knowledge of REST APIs Experience using Splunk and/or other SIEMs. Grasp complex technical concepts and present them in understandable terminologies Work closely with other Information Security teams to ensure effective intrusion detection and incident response. Continually maintain and improve technical capabilities through individual development activities, accreditations and certifications to remain constantly prepared to challenge the ever-evolving cyber threat. Exceptional written and verbal communication skills.\'

foundit