SOAR Engineer

منذ 3 أيام

Abu Dhabi, Abu Dhabi Emirate, الإمارات العربية المتحدة CyberGate Defense دوام كامل ‏120,000 € - ‏160,000 € عقد
Responsibilities
- Design and implement advanced SOAR playbooks for use cases such as phishing, incident response, vulnerability management, and threat hunting.
- Integrate SOAR platforms with SIEM, EDR/NDR, TIPs, and ITSM tools.
- Develop custom scripts, APIs, and integrations to extend automation capabilities.
- Lead playbook validation, testing, and production deployment.
- Optimize SOAR performance in high-volume SOC environments.
- Collaborate with SOC teams to enhance automation maturity and response efficiency.
- Create dashboards, reports, and documentation, and drive knowledge transfer.
- Continuously improve automation based on emerging threats and TTPs. Qualifications
- 5+ years of SOAR experience (design, development, deployment).
- Minimum 1+ year hands‑on experience with FortiSOAR.
- Experience with IBM SOAR (Resilient) is a strong advantage.
- Strong Python scripting and API integration (REST/SOAP, JSON, XML).
- Solid understanding of SOC operations, incident response, and SIEM platforms.
- Experience integrating security tools (firewall, EDR, IDS/IPS, DLP, email security).
- Exposure to cloud platforms (AWS/Azure/GCP) and security frameworks (NIST, ISO 27001, etc.).
- Strong stakeholder communication and project delivery skills. Impact Drive end-to-end SOC automation, reduce manual effort, and improve incident response speed, consistency, and scalability.