CSOC Playbook & Project Leader (CSOC - Cyber Security Operations Center)
Core
Lead the documentation, improvement, and automation of CSOC playbooks to enhance detection and response capabilities against cyber threats.
Role type
Senior IC Security Operations Center (CSOC) Playbook & Project Leader
Builds
Automated security response workflows using AI and SOAR
Domain
Cybersecurity / E-commerce
Deliverable
production ML models | product features
Required skills
SIEM use case creation, incident response, public cloud security (AWS/Azure/GCP), host-based event analysis, endpoint security (EDR/HIPS), application security knowledge
Preferred skills
E-commerce security experience, container security (Kubernetes/Docker), scripting (Python/Shell/PowerShell), MITRE ATT&CK framework
Technologies
SIEM, SOAR, AWS, Azure, GCP, EDR, HIPS, Kubernetes, Docker, Python, Linux shell, PowerShell
Responsibilities
Document and improve CSOC response playbooks, collaborate on CSOC projects, automate playbooks via AI and SOAR, generate metrics for playbook status and automation scope, provide technical support to related departments, communicate with CSOC analysts to establish data-driven playbooks
Seniority
Senior, hands-on IC