SOAR Automation

Operational security automation is the process of automating some or all aspects of SOC or VOC operations. Replacing manual workflows with automated ones.

A fundamental building block of automation is the security playbook. A playbook defines a workflow by outlining the steps teams will take to handle different types of security alerts or events. By developing playbooks ahead of time, teams avoid having to make a response plan every time an alert or event occurs.

Responsibilities :

• Scripting and workflow development, follow proper engineering and integration lifecycles (design, create, test, document, integrate, monitor, maintain) and are designed to be reusable. Creating and integrating APIs to create orchestrated workflows.
• Autonomously plan security automation daily operations to ensure targets are being met.
• Identify and recommend necessary changes to the operational security teams to ensure automation and orchestration, maximize team talent and reduce routine tasks.
• Ensure operational security automations meet business and technical requirements, are maintainable, scalable and meet performance standards
• Bring external perspective and ideas from relevant sources, keep current with technology and industry best practices of the security industry threat landscape
• Communicate technical and functional requirements using an effective, efficient, and creative approach with a high degree of collaboration and influence.
• Work with in-house teams to identify the right mix of tools, techniques, and procedures to translate our needs and future goals into a plan that will enable secure and effective solutions.

Required Skills :