Title:  Senior Engineer

The Automation Lead is responsible for overseeing all automation initiatives within the MSSP SOC environment, ensuring efficient integration and functionality of automation tools to enhance SOC operations. As a lead, this role requires managing the automation team, driving strategic automation projects, and ensuring alignment with SOC goals.

Responsibilities:

• Leadership and Oversight:
  • Lead the automation team, providing direction, mentorship, and technical guidance.
  • Manage and prioritize automation projects to align with SOC and organizational objectives.
     
• Strategic Planning:
  • Develop long-term automation strategies to enhance SOC efficiency.
  • Collaborate with SOC leadership to align automation initiatives with operational goals.
     
• Automation and Orchestration:
  • Oversee the design and implementation of automated workflows across SOC operations.
  • Ensure seamless integration of tools and technologies within the SOAR platform.
     
• Playbook and Process Optimization:
  • Review and approve playbook designs, ensuring they meet quality standards and client-specific requirements.
  • Continuously evaluate and refine automation workflows for efficiency.
     
• Collaboration and Stakeholder Management:
  • Act as the primary point of contact for automation-related initiatives and challenges.
  • Liaise with customers, SOC teams, and external vendors to ensure alignment.
     
• Knowledge Sharing and Training:
  • Drive training programs for automation tools, enhancing team proficiency.
  • Foster a culture of innovation and continuous learning within the automation team.
• Performance Tracking:
  • Monitor and report on the effectiveness of automation initiatives.
  • Provide regular updates to SOC leadership on project status and achievements.

Requirements:

• Extensive experience with SOAR platforms and automation tools, particularly Palo Alto XSOAR.
• Strong leadership skills with a proven track record in managing technical teams.
• Advanced scripting skills, primarily in Python.
• In-depth knowledge of SOC operations and security processes.
• Relevant certifications (e.g., Palo Alto Cortex XSOAR, CISSP) preferred.
• Strategic mindset with the ability to drive innovation.

• A collaborative mindset to work effectively with other SOC tiers and managers.
• Strong analytical and problem-solving skills to address complex security challenges.
• Commitment to continuous learning to stay updated with the latest security trends and technologies.
• Adherence to SOC playbooks, standard operating procedures, and compliance requirements.