SOAR Developer

Work closely with security analysts and engineers to detect and address security gaps by implementing automation workflows that enhance security operations. Evaluate and enhance CSOC workflows and processes by integrating automation through SOAR tools and technologies. Deploy CSOC automation and ensure compatibility with existing detection and response tools. Create and implement custom scripts to automate current detection and response workflows. Operate and refine the CSOC playbook and workflow automations. Requirement Analysis - Collaborating with stakeholders to gather and analyse requirements for the Soar and translating them into actionable development tasks. Risk Management - Identifying potential risks and challenges in Soar development projects alongside implementing strategies to mitigate them. Vendor Management - Collaborating with external vendors or partners when necessary for tool integration, support or other aspects of SOAR development. Strong understanding of security concepts and practices, along with proficiency in programming languages such as Python, JavaScript or others commonly utilised in Soar development. In-depth knowledge and extensive hands-on experience with Soar platforms such as Splunk Phantom, Siemplify, IBM Resilient or similar tools. Knowledge of advanced threat detection and response methodologies alongside tools such as SIEM and SOAR. Comprehensive understanding of cybersecurity principles including security operations, incident response and threat intelligence. Strong analytical and problem-solving skills to identify and address complex technical challenges in Soar solution development. Excellent familiarity with standard security frameworks such as MITRE, cyber kill chain and APT campaign strategies. Proven ability to work efficiently in fast-paced work environment and manage multiple priorities simultaneously. Bachelor's degree or higher in Cyber Security/Information Technology or related field One or more cyber security certifications such as GCIA, GCIH, GCFA, GNFA, CEH, ECSA preferred