SOAR Admin

Manage and maintain the SOAR platform, develop automation scripts, create incident response playbooks, integrate security tools and technologies, and continuously improve security operations.

Requirements

• Manage and Maintain the SOAR platform by troubleshooting in co-ordination with the OEM support.
• Develop and maintain automation scripts using languages like Python, PowerShell, or others to automate routine and repetitive security tasks within the SOAR platform.
• Design, create, and update incident response playbooks that outline the sequence of automated actions to be taken in response to specific security incidents.
• Integrate diverse security tools and technologies, including SIEM, IDS/IPS, and antivirus solutions, into the SOAR platform to create a cohesive and interoperable security ecosystem.
• Incorporate threat intelligence feeds into the SOAR platform to enhance the organization's ability to proactively detect and respond to emerging cyber threats.
• Regularly assess and optimize automation workflows, playbooks, and processes to improve the efficiency and effectiveness of security operations.
• Create and maintain comprehensive documentation for SOAR platform configurations, incident response playbooks, and best practices to ensure consistency and facilitate knowledge transfer within the team.