Security Automation and Orchestration (SOAR) Engineer
Core
Create, configure, run, and maintain automation playbooks; review cloud security alerts; perform enrichment and escalate suspicious cases; optimize cloud security technologies.
Role type
Security Orchestration, Automation and Response (SOAR) Engineer
Builds
Automated security workflows, CNAPP integrations, and security monitoring dashboards
Domain
Cloud Security, Security Operations (SOC), Automation
Required skills
Cloud computing, SOAR platform management, RESTful API integration, Scripting, CI/CD operations, Vulnerability management, Cloud security tools (Azure Defender, Sentinel, WIZ, Sonar), SIEM, Kubernetes, VMware
Preferred skills
PowerBI, Azure Data Factory, ServiceNow, Rapid7
Technologies
Azure, Azure Defender, Sentinel, Azure AD, Azure ADF, WIZ, Sonar, VMware, Kubernetes, NSXT, SIEM, MFA, NAC, DDoS, WAF, Microsoft Teams, ServiceNow, Clarity, Rapid7, PowerBI, SOAR platforms
Responsibilities
Develop and maintain SOAR workflows and automation playbooks; Monitor CNAPP dashboards and alerts for misconfigurations and vulnerabilities; Perform initial triage and enrichment of security findings; Tune security policies to reduce false positives; Collaborate with IT teams to integrate security controls; Create and execute automation logic for incident response; Develop and maintain PowerBI reports using Azure Data Factory; Document integrations and workflows.
Seniority
Mid-level, hands-on IC
