Security Operations Engineer
Core
Support, maintain, and expand the Security Orchestration, Automation, and Response (SOAR) platform to streamline security operations and enhance incident response efficiency.
Role type
Security Operations Engineer (SOAR focus)
Builds
Automated security playbooks, workflows, and integrations for Take-Two's security operations
Domain
Cybersecurity / Security Operations
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
SOAR platform operations, API integration, Python scripting, security automation, incident response workflows, technical documentation
Preferred skills
SOC analyst experience, SIEM/EDR/threat intelligence platform knowledge, Go/Bash/PowerShell/JavaScript, MITRE ATT&CK/NIST frameworks
Technologies
SOAR platforms (Palo Alto Networks Cortex XSOAR, Tines, Splunk SOAR), Python, APIs
Responsibilities
Develop, test, and maintain SOAR playbooks and integrations; identify and automate repetitive manual tasks; partner with security analysts to optimize workflows; create and maintain documentation for automation scripts and tool integrations; assist with basic SOAR platform maintenance, updates, and logging changes
Seniority
Junior to Mid-level, hands-on IC
