Found Description
Responsibilities
- Design and implement advanced SOAR playbooks for use cases such as phishing, incident response, vulnerability management, and threat hunting.
- Integrate SOAR platforms with SIEM, EDR/NDR, TIPs, and ITSM tools.
- Develop custom scripts, APIs, and integrations to extend automation capabilities.
- Lead playbook validation, testing, and production deployment.
- Optimize SOAR performance in high-volume SOC environments.
- Collaborate with SOC teams to enhance automation maturity and response efficiency.
- Create dashboards, reports, and documentation, and drive knowledge transfer.
- Continuously improve automation based on emerging threats and TTPs.
Qualifications
- 5+ years of SOAR experience (design, development, deployment).
- Minimum 1+ year hands‑on experience with FortiSOAR.
- Experience with IBM SOAR (Resilient) is a strong advantage.