SOAR Engineer
Project description
Join our Development Centre in Bucharest and become a member of our open-minded, progressive and professional team. In this role you will be working for one of our world-famous clients. The Chief Security Office (CSO) of our client comprises the Chief Information Security Office (CISO) and the Corporate Security unit. The CISO organization guarantees information security for our client. The current initiatives are centered on enhancing cybersecurity capabilities across several critical domains: Threat Intelligence, Advanced Persistent Threats (APTs), Red Team Operations, Forensics and Malware Analysis. These projects are designed to strengthen the organization's defense systems and enhance response strategies against complex cyber threats. We are looking for candidates with strong engineering experience in the areas mentioned above to assist in evaluating and selecting the most effective tools. The roles include implementing the chosen solutions, migrations to different platforms and integrating them with already existing systems to ensure a smooth transition and improved security posture. On top of attractive salary and benefits package, Luxoft will invest into your professional training, and allow you to grow your professional career.
Responsibilities
- Acting as a SME for Security Engineering for the Security Orchestration Automation and Remediation area
- Perform and provide guidance for SOAR Engineering on SOAR product configurations and maintenance activity
- Responsible for analyzing and documenting the SOAR architecture and create Architecture Artifacts describing HLD and LLD setup and maintain existing ones.
- Develop, implement, and execute standard procedures for the administration, content management, change management, version/patch management, and lifecycle management
- Develop and implement new Integrations as per process requirements
- Develop, test, promote and maintain automated workflows within the SOAR platform
SKILLS
Must have
- 3-5 years of working experience of deploying, maintenance, support with SOAR platforms (Splunk Phantom SOAR, Chronicle SOAR, Torq, etc)
- Experience working with DevOps tools, Terraform preferred.
- GCP or Azure Cloud Management experience
- Linux Administration hands-on experience is a plus.
- Understanding of security frameworks (MITRE ATT&CK, NIST CSF, etc.)
Nice to have
• Experience in a multinational environment would be a plus
