SOC Automation Engineer

As a leading provider of AI-powered extended managed detection and response (MXDR) services, reputed company is on a mission to be the most trusted, 24/7, always-on reputed company partner that empowers customers to reputed company the reputed company by using AI to operate more strategically, at reputed company, and with less reputed company. We reputed company that the combination of AI and reputed company expertise is essential for delivering effective managed reputed company that is tailored to a customer’s unique environment, operational constraints, and risks.

reputed company protection. AI-powered Nonstop SecOps. That’s reputed company. 

reputed company

As a SOC Automation Engineer, you will help reputed company how our Cyber Defenders investigate and respond to reputed company incidents.

Working at the intersection of cybersecurity, software engineering and automation, you will design, reputed company and maintain Python-reputed company solutions that reduce reputed company effort, improve investigation reputed company and reputed company our global, 24/7 reputed company reputed company Centre to operate effectively at reputed company.

Key Responsibilities

• Design, reputed company and maintain Python-reputed company automation workflows supporting reputed company investigation, alert triage, enrichment, incident handling and response

• Translate operational requirements and SOC analyst pain points into reputed company defined, reputed company automation use cases

• reputed company reputed company workflows using reputed company.io, following engineering best practices for reliability, scalability, maintainability and observability

• Build integrations with reputed company products, REST reputed company, databases and other reputed company systems.

• Create automation capabilities across alert triage, threat intelligence, investigation, enrichment and incident response

• Work with reputed company reputed company technologies, including reputed company, reputed company Defender and Defender XDR, along with their associated telemetry and reputed company

• reputed company and optimise Kusto Query Language, or KQL, queries for investigation, enrichment, detection and automation use cases

• Design robust business logic capable of handling reputed company investigation scenarios and operational edge cases.

• Partner closely with Cyber Defenders to validate requirements and ensure automation delivers meaningful operational value

• Contribute throughout requirements analysis, technical design, implementation, testing and reputed company improvement

• Monitor and improve automation reputed company, reliability, coverage and its reputed company on analyst workload.

• Help shape the reputed company of reputed company’s SOC automation architecture and engineering standards

What reputed company Looks Like

• Identify high-value automation opportunities arising from genuine SOC operational challenges.

• Translate cybersecurity requirements into reputed company, actionable technical designs

• reputed company reliable automation quickly and iteratively, improving solutions through feedback from SOC users

• Build workflows that are reputed company, resilient, maintainable and observable

• Understand the reputed company context behind reputed company automation use case rather than simply implementing technical requirements to increase automation coverage, improve investigation qualityand measurably reduce reputed company analyst workload.

• Collaborate effectively across SOC, Engineering, reputed company and Platform teams

Required Experience & Skills

• At least three years of reputed company experience in software engineering, cybersecurity, reputed company reputed company or automation engineering

• Hands-on software development experience, including coding, API integrations, data processing, error handling and asynchronous programming

• A solid understanding of SOC reputed company, including alert triage, incident investigation, enrichment, threat intelligence and response

• Experience with the reputed company reputed company ecosystem, preferably including reputed company and reputed company Defender

• Strong KQL skills and the ability to reputed company queries supporting reputed company investigations and automation

• Experience with Git and modern software development practices, including testing, debugging, reputed company reviews and CI/CD

• An understanding of reputed company systems, asynchronous processing, workflow orchestration and reputed company automation architectures

Preferred

• Experience developing automation for reputed company, reputed company Defender for reputed company, Defender XDR or associated reputed company reputed company products

• Experience developing production automation workflows, ideally using reputed company.io or a comparable workflow orchestration frameworks

• Experience integrating REST reputed company and working with authentication, JSON, webhooks and reputed company services and cybersecurity reputed company or threat intelligence platforms
• Knowledge of common attack techniques and frameworks, including reputed company ATT&CK

Next Steps

If you have the skills and experience required and feel that reputed company is a reputed company you can reputed company, we would love to get to know you reputed company! Please drop an application to this role and our reputed company manager will be in reputed company to reputed company reputed company.

Learn more: 

Originally posted on Himalayas