Source description
About the role
You will be responsible for managing, customizing, and enhancing the Security Orchestration, Automation, and Response (SOAR) platform at our company. Your key responsibilities will include: - Acting as the Master Administrator for the IBM SOAR platform - Designing, implementing, and maintaining automatic and manual playbooks based on SOC workflows and requirements - Developing and managing custom scripts, functions, and workflows to support automation in IBM SOAR - Setting up and managing the IBM SOAR Integration Server - Integrating IBM SOAR with various SOC tools (SIEMs, EDRs, firewalls, etc.) and threat intelligence platforms - Automating manual processes handled by SOC analysts to streamline operations - Collaborating with the SOC team to identify opportunities for orchestration and automation - Maintaining platform documentation and providing training to SOC team members as needed - Performing regular system checks and updates to ensure platform reliability and security Required Skills and Qualifications: - Solid hands-on experience with IBM SOAR (Resilient) platform - Deep knowledge of IBM SOAR playbook creation, workflow design, and integration - Proficiency in Python scripting and using RESTful APIs - Working knowledge of HTML, JavaScript, CSS for UI-level customizations - Familiarity with basic Linux commands and system operations - Experience integrating security tools (SIEM, EDR, AV, firewalls) and threat intelligence feeds with SOAR - Basic understanding of ticketing systems (ServiceNow, JIRA, etc.) - Ability to work independently as well as collaboratively within a team - Strong analytical, troubleshooting, and problem-solving skills Preferred Qualifications: - IBM SOAR certification or equivalent training - Exposure to other SOAR platforms like Palo Alto XSOAR, Splunk SOAR is a plus You will be responsible for managing, customizing, and enhancing the Security Orchestration, Automation, and Response (SOAR) platform at our company. Your key responsibilities will include: - Acting as the Master Administrator for the IBM SOAR platform - Designing, implementing, and maintaining automatic and manual playbooks based on SOC workflows and requirements - Developing and managing custom scripts, functions, and workflows to support automation in IBM SOAR - Setting up and managing the IBM SOAR Integration Server - Integrating IBM SOAR with various SOC tools (SIEMs, EDRs, firewalls, etc.) and threat intelligence platforms - Automating manual processes handled by SOC analysts to streamline operations - Collaborating with the SOC team to identify opportunities for orchestration and automation - Maintaining platform documentation and providing training to SOC team members as needed - Performing regular system checks and updates to ensure platform reliability and security Required Skills and Qualifications: - Solid hands-on experience with IBM SOAR (Resilient) platform - Deep knowledge of IBM SOAR playbook creation, workflow design, and integration - Proficiency in Python scripting and using RESTful APIs - Working knowledge of HTML, JavaScript, CSS for UI-level customizations - Familiarity with basic Linux commands and system operations - Experience integrating security tools (SIEM, EDR, AV, firewalls) and threat intelligence feeds with SOAR - Basic understanding of ticketing systems (ServiceNow, JIRA, etc.) - Ability to work independently as well as collaboratively within a team - Strong analytical, troubleshooting, and problem-solving skills Preferred Qualifications: - IBM SOAR certification or equivalent training - Exposure to other SOAR platforms like Palo Alto XSOAR, Splunk SOAR is a plus
More at Important Company of the Sector
Related open roles
Network Security Specialist (Noida)
Delhi NCR
Security Operations Engineer - Start Immediately (Noida)
Delhi NCR
SecOps Analyst - Enterprise Security (Chandampalli)
Hyderabad
Oracle Cloud Security & Risk Management (Hyderabad)
Hyderabad
IT Network Security Engineer (Kakkanad)
India
Oracle Security & Authorisations - Consultant (Mumbai)
Mumbai