Lead Cyber Security Engineer (SOAR)

• Architect, build, and maintain enterprise SOAR automations using Swimlane, Splunk Phantom, and Microsoft Logic Apps. 
  
• Develop advanced, scalable playbooks and integrations across SIEM, EDR, NDR, identity, cloud, network, and ticketing systems. 
  
• Create reusable automation modules, connectors, and workflow components for consistent orchestration across the environment. 
  
• Lead automation -driven incident response capabilities, including enrichment, triage, containment, and remediation actions. 
  
• Integrate SOAR workflows with Microsoft Defender, Sentinel, Entra, ServiceNow, and other API -driven platforms. 
  
• Oversee SOAR platform operations, including governance, tuning, upgrades, reliability improvements, and troubleshooting. 
  
• Partner with SOC, IR, Security Engineering, Cloud, Network, and Identity teams to identify high -impact automation opportunities and optimize processes. 
  
• Conduct root -cause analysis of automation failures and implement long -term corrective and preventive improvements. 
  
• Mentor SOC analysts and junior engineers on automation development, best practices, and operational use of SOAR technologies. 
  
• Maintain comprehensive documentation and produce performance metrics demonstrating SOC efficiency gains and automation ROI.
  

Requirements

• Solid understanding of network protocols, data protection mechanisms, and threat landscapes
  
• Hands -on experience with security systems, including firewalls, intrusion detection systems, anti -virus software, etc.
  

• Industry -recognized certifications (e.g., CISSP, CISM, CEH)
  
• Master’s degree in Cybersecurity or a related field