01Overview
Responsibility of / Expectations from the Role:
1. Automate incident response procedures to ensure quick and efficient handling of security incidents.
2. Integrate various security tools and platforms to create a cohesive and automated security ecosystem.
3. Utilize and manage APIs to connect different security systems and applications.
4. Design, develop, and maintain automation scripts to streamline cybersecurity processes and tasks.
5. Implement and manage orchestration workflows to automate incident response and other security operations.
6. Diagnose and resolve issues related to the security automation and systems integrations
7. Ensure all automated systems are functioning correctly through regularly scheduled health checks and maintenance.
8. Work closely with security analysts, engineers, and other stakeholders to understand requirements and deliver effective automation solutions.
9. Test and validate automation scripts and workflows to ensure they function correctly and securely.
Required Technical Skill Set:
Strong skills in working with APIs to integrate various security tools and systems (RESTful and SOAP).Experience integrating with API's on security platforms such as SIEM, SOAR, or EDR.Experience developing automated playbooks in SOAR platformsExpertise in at least one or more of scripting language like Python, JavaScript, PowerShell for scripts and integrations.Knowledge of network protocols (TCP/IP, HTTP/S, DNS) and their security implications.Comprehensive understanding of security principles, including encryption, authentication, and secure coding practices.Competencies (Technical / Behavioral Competency):
Must-Have (Ideally should not be more than 3-5):
Knowledge of the application of automation and Orchestration in a Cybersecurity/ IT environment.Ability to analyze and manipulate data from different sources to create meaningful security metrics and reports.Extensive problem solving and analytical skillsStrong ability to work with different teams (DevOps, IT, Compliance) for seamless integration and support.Proficiency with version control systems like Git for managing code changes and collaborations effectively.Good-to-Have:
Certified in Security +, Splunk Certified Phantom Admin, IBM Certified Deployment Professional, Cortex XSOAR Engineer, Azure Security Engineer or any other SOAR/ Cloud related Certifications.Experience of working with diverse teams and is a team player.
