Responsibilities
- To provide automation for the Vanguard Cyber Security Operations Center using (Security Orchestration Automation and Response) SOAR technology.
- Understands client business functions and technology needs. Understands Vanguards tools technologies and applications/databases including those that interface with business area and systems.
- Develop and optimize SOAR playbooks.
- Automate incident response processes and streamline security operations for faster threat resolution.
- Integrate SOAR with various security tools and services using APIs for seamless automation workflows.
- Monitor and troubleshoot SOAR playbooks to ensure optimal performance and incident response.
- Document SOAR processes and provide training to team members on new workflows and playbooks.
- Research new automation techniques and optimize existing workflows to improve efficiency.
- Learns and complies with Information Technology and Information Security policies and procedures.
Qualifications
- Experienced in designing playbooks in Tines or other SOAR platforms.
- Strong understanding and experience working with application programming/scripting languages such as Python and PowerShell as well as Regular Expressions.
- Strong background in developing and maintaining automation playbooks and scripts.
- Robust understanding of identity SIEM cybersecurity and infrastructure concepts.
- Strong written and presentation skills; ability to clearly communicate complex messages to a variety of audiences.
- Strong interpersonal and communication skills; ability to work in a team environment.
- Minimum of five years related work experience with at least three years of development experience.
- Undergraduate degree or equivalent combination of training and experience.
Required Skills : Network Security
Basic Qualification :
Additional Skills : Security Engineer
Background Check : No
Drug Screen : No