About the role
Job Responsibilities:
Cyber Security SOAR Specialist having experience with the following:
* Utilize strong scripting skills in Python to automate security tasks and processes.
* Design and execute API requests using Python to integrate various security tools and platforms
* scripting experience in (PowerShell, Bash).
* Apply knowledge of Security Orchestration, Automation, and Response (SOAR) concepts to enhance security operations
* Work with SOAR platforms such as Cortex XSOAR and IBM Resilient to streamline incident response and management
* Collaborate with cross-functional teams to identify and mitigate security threats
* Conduct regular security assessments and audits to ensure compliance with industry standards
* Provide technical guidance and support for security-related projects and initiatives
* Stay updated on the latest cybersecurity trends, threats, and best practices
* Participate in incident response activities and contribute to post-incident analysis and reporting
* Create and maintain detailed documentation of security processes, configurations, and integrations.
* Assist in the development and implementation of security policies, procedures, and protocols
* secure a system or device so it can't be tampered with.
* use a range of forensic tools and software to extract and analyze data.
* deal with highly sensitive or confidential data or images, depending on the type of case youre investigating.
* recover damaged, deleted or access hidden, protected or encrypted files.
* collect information and evidence in a legally admissible way.
* write technical reports based on your findings and, if required, give evidence in court as an expert witness.
* SOAR experience including playbook design and integrations.
* Strength in designing custom playbooks and the experience to act as a consultant for clients when designing the workflows.
* Understand customer requirements for SOC service and able to position the offering.
* Prepare proposals and respond to RFP for SOAR & SOC services.
* Ability to work independently with little or no supervision and result oriented.
* Able to execute instructions and to request clarification when needed.
* Able to exhibit ability to be sensitive to the needs, concerns, and feeling of others.
* Able to interact effectively with all levels of management.
* Strong application and infrastructure knowledge; e.g. Tomcat, PostgreSQL, SAML, IMAP, LDAP, Active Directory, SSO.
* Development Environment knowledge in Linux, bash shell programming, git, Gradle, virtual machines, Docker and Podman.
* Working knowledge of Networking concepts (firewalls, DNS, IP addressing, SSL/TLS and certificates). * Qualifications: * Bachelors Degree in Computer Science, Cyber Security, Information Systems or Business Administration. * Excellent written, verbal communication skills, ability to effectively coordinate multiple priorities in a dynamic environment, strong analytical and negotiating skills & excellent organization and interpersonal skills required * Proficiency in Python programming language * Strong knowledge of API requests and integrations using Python * Familiarity with SOAR concepts and platforms, specifically Cortex XSOAR and IBM Resilient * Experience in automating security workflows and processes * Knowledgeable in Windows Domain, network and multi-tier application architectures * Security software countermeasures * Persuasive with details and facts * Ability to work both independently as well as part of a geographically dispersed integrated team * Ability to balance multiple priorities in a fast-paced, highly collaborative, frequently changing, and sometimes ambiguous environment * Knowledge of how to use network management tools and packet captures to resolve operational issues * Familiarity with industry standard network management tools and common application traffic flow patterns in multi-tiered applications * Expert knowledge in the following technologies: * Microsoft Active Directory Services * TCP/IP Based Networking Principles * Microsoft / Linux Operating Systems * Firewalls and Perimeter Security * Proxies and Load Balancers * Intrusion Detection and Prevention Systems (IDS/IPS)
Originally posted on Himalayas