TC-CS-CDR-SIEM SOAR Platform Engineer-Senior in Hyderabad, भारत
Ernst & Young
Hyderabad, भारत
At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.
SIEM SOAR/Platform Engineer The ideal candidate will have extensive experience with Palo Alto Cortex XSOAR (formerly Demisto) and a strong background in security automation and orchestration.
Key Responsibilities:
Automation Development: Design, develop, and maintain security automation playbooks using XSOAR.
Integration: Integrate various security tools and systems with XSOAR to enhance incident response capabilities.
Incident Response: Collaborate with the SOC team to automate and streamline incident response processes.
Custom Scripting: Develop custom scripts and integrations using Python or other relevant programming languages.
Monitoring and Optimization: Continuously monitor and optimize XSOAR playbooks and integrations for performance and effectiveness.
Documentation: Create and maintain comprehensive documentation for all automation processes and playbooks.
Training: Provide training and support to SOC analysts on the use of XSOAR and automated workflows.
Skills and Qualifications:
Experience: 3+ years of experience in security automation and orchestration, with a focus on XSOAR.
Technical Expertise: Proficiency in Palo Alto Cortex XSOAR, Python scripting, and integration of security tools.
Security Knowledge: Strong understanding of security operations, incident response, and threat intelligence.
Problem-Solving: Excellent analytical and problem-solving skills with the ability to troubleshoot complex issues.
Communication: Strong verbal and written communication skills to effectively collaborate with team members and stakeholders.
Preferred Qualifications:
Experience with other SOAR platforms and SIEM tools.
Relevant certifications such as CISSP, CEH, or Palo Alto Networks certifications.
Knowledge of cloud security services and environments (AWS, Azure, GCP).
Additional Information:
Willing to work from ODC as and when required in rotational shift.
Weekend availability/flexibility to work weekends is a MUST.
Willing to support US shift (Night shift)
EY | Building a better working world
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
... manage risks is a plus Skills and attributes for success - Completed technical higher education in the field of industrial automation, computer science, electronics or other relevant fields - Certificates or education related to industrial automation / engineering etc. - Knowledge on OT network monitoring solution such as ...
... powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. Job Summary: - Cyber Security Engineer We are seeking a skilled Cyber Security Engineer to join our dynamic team responsible for the creation and maintenance of hardened VM images in AWS and Azure ...
Role Overview : The Security Engineer, Perimeter Security Operations is based in Hyderabad, India and is responsible for protecting Fanatics Commerce's global e-commerce and API platform by managing detection, response, tuning, automation, and reliability across CDN, WAF, and networking https://jobeax.com/link/cyqNkqtuPIWv5vTi ...
... domains, including endpoint security (EDR/XDR), vulnerability scanning, SIEM/SOAR, network security, and AI security https://jobeax.com/link/JpsOC0VrTgitAlOy :- Platform configuration, system administration, health monitoring, and performance tuning.- Patch management, upgrades, migrations, and lifecycle planning.- Tool integration, ...
... respond to cyber threats across our global enterprise infrastructure. The ideal candidate will orchestrate real-time security incident monitoring using advanced SIEM/SOAR platforms, perform deep technical analysis of anomalous events, and execute rapid containment workflows to safeguard business networks. Key Responsibilities ...
... QA, testing, and documentation of automation artefacts. - Maintain reliability of automations by monitoring performance, exceptions, and system behaviour. Platform Integration & Tooling Engineering - Integrate SOAR with SIEM, EDR, TIP, cloud-native security tools, and case management systems. - Engineer automation pipelines ...
... history of integrating new technologies to enhance daily workflows and augment problem-solving - 8+ years of experience as a Platform Engineer / Site Reliability Engineer / DevOps Engineer, including 3+ years supporting AI/ML or data platform infrastructure, with deep hands-on expertise in AWS (EKS, Lambda, ECS, VPC, IAM, S3) ...
... response. Your role bridges engineering and operations, transforming security challenges into scalable, automated solutions. Your core responsibilities include: - SIEM Engineering: Manage our SIEM platform, onboard and normalize log sources, build and maintain parsers, and ensure high-fidelity data pipelines for detection and ...