SOAR Engineer

منذ 3 أيام

Abu Dhabi, Abu Dhabi Emirate, الإمارات العربية المتحدة CyberGate Defense دوام كامل ‏120,000 د.إ.‏ - ‏160,000 د.إ.‏ عقد

Responsibilities

  • Design and implement advanced SOAR playbooks for use cases such as phishing, incident response, vulnerability management, and threat hunting.
  • Integrate SOAR platforms with SIEM, EDR/NDR, TIPs, and ITSM tools.
  • Develop custom scripts, APIs, and integrations to extend automation capabilities.
  • Lead playbook validation, testing, and production deployment.
  • Optimize SOAR performance in high-volume SOC environments.
  • Collaborate with SOC teams to enhance automation maturity and response efficiency.
  • Create dashboards, reports, and documentation, and drive knowledge transfer.
  • Continuously improve automation based on emerging threats and TTPs.

Qualifications

  • 5+ years of SOAR experience (design, development, deployment).
  • Minimum 1+ year hands‑on experience with FortiSOAR.
  • Experience with IBM SOAR (Resilient) is a strong advantage.
  • Strong Python scripting and API integration (REST/SOAP, JSON, XML).
  • Solid understanding of SOC operations, incident response, and SIEM platforms.
  • Experience integrating security tools (firewall, EDR, IDS/IPS, DLP, email security).
  • Exposure to cloud platforms (AWS/Azure/GCP) and security frameworks (NIST, ISO 27001, etc.).
  • Strong stakeholder communication and project delivery skills.

Impact

Drive end-to-end SOC automation, reduce manual effort, and improve incident response speed, consistency, and scalability.