Virtusa Recognized as Global Leader in Gen AI Services by ISG Provider Lens® - Read report
Lead Security Automation Engineer
Job description
Develop and optimize automation workflows within Torq Hyperautomation or other SOAR platforms such as XSOAR Splunk SOAR LogicHub Swimlane
Build API integrations between security tools such as SIEMs EDRs XDRs case management systems and cloud platforms
Extensively work with JSON formatting parsing and data transformations to enable seamless data exchange across multiple security platforms
Streamline incident response automation to improve efficiency reduce MTTR and enhance security event correlation
Design and maintain fault tolerant automation processes that scale across thousands of clients
Maintain and optimize CI CD pipeline infrastructure within a SOAR platform
Collaborate with SOC analysts DFIR teams and threat intelligence groups to refine and enhance automation capabilities
Lead migration projects to improve automation platforms ensuring seamless transitions without impacting security operations
Continuously evaluate and implement emerging automation techniques to enhance SOC and MSSP workflows
Skills and Ability
Must Have Skills and Experience
1 plus years of experience in security automation SOAR engineering or cybersecurity automation within an MSSP DFIR or enterprise security environment
Extensive experience working with JSON including JSON schema design manipulation parsing and API based data transformations
Strong scripting skills in Python PowerShell or Bash for workflow automation
Proficiency in API development and integration including RESTful APIs JSON based APIs and webhook automation
Experience working with SIEM such as Splunk Sentinel QRadar Rapid7 IDR and EDR or XDR tools such as CrowdStrike SentinelOne Stellar Cyber Cortex XDR
Knowledge of incident response threat intelligence and security event lifecycle management
Nice to Have Skills
Experience in multi client environments MSSP IR firms or security service providers
Hands on experience with Torq Hyperautomation XSOAR Splunk SOAR or similar platforms
Certifications such as Torq SOAR Analyst Torq SOAR Expert CompTIA Security plus AWS or Azure Security Certifications
Proficiency in using JQ filters for data manipulation
Familiarity with CI CD pipelines such as Azure DevOps
Experience automating cloud security workflows AWS Azure Google Cloud
Familiarity with case management automation and cross platform data normalization
Prior experience leading SOAR migration projects or developing custom security playbooks.
Qualification
Key responsibilities and Accountabilities
Develop and optimize automation workflows within Torq Hyperautomation or other SOAR platforms such as XSOAR Splunk SOAR LogicHub Swimlane
Build API integrations between security tools such as SIEMs EDRs XDRs case management systems and cloud platforms
Extensively work with JSON formatting parsing and data transformations to enable seamless data exchange across multiple security platforms
Streamline incident response automation to improve efficiency reduce MTTR and enhance security event correlation
Design and maintain fault tolerant automation processes that scale across thousands of clients
Maintain and optimize CI CD pipeline infrastructure within a SOAR platform
Collaborate with SOC analysts DFIR teams and threat intelligence groups to refine and enhance automation capabilities
Lead migration projects to improve automation platforms ensuring seamless transitions without impacting security operations
Continuously evaluate and implement emerging automation techniques to enhance SOC and MSSP workflows
Skills and Ability
Must Have Skills and Experience
1 plus years of experience in security automation SOAR engineering or cybersecurity automation within an MSSP DFIR or enterprise security environment
Extensive experience working with JSON including JSON schema design manipulation parsing and API based data transformations
Strong scripting skills in Python PowerShell or Bash for workflow automation
Proficiency in API development and integration including RESTful APIs JSON based APIs and webhook automation
Experience working with SIEM such as Splunk Sentinel QRadar Rapid7 IDR and EDR or XDR tools such as CrowdStrike SentinelOne Stellar Cyber Cortex XDR
Knowledge of incident response threat intelligence and security event lifecycle management
Nice to Have Skills
Experience in multi client environments MSSP IR firms or security service providers
Hands on experience with Torq Hyperautomation XSOAR Splunk SOAR or similar platforms
Certifications such as Torq SOAR Analyst Torq SOAR Expert CompTIA Security plus AWS or Azure Security Certifications
Proficiency in using JQ filters for data manipulation
Familiarity with CI CD pipelines such as Azure DevOps
Experience automating cloud security workflows AWS Azure Google Cloud
Familiarity with case management automation and cross platform data normalization
Prior experience leading SOAR migration projects or developing custom security playbooks
Key job details
About Virtusa
Teamwork, quality of life, professional and personal development: values that Virtusa is proud to embody. When you join us, you join a team of 27,000 people globally that cares about your growth — one that seeks to provide you with exciting projects, opportunities and work with state of the art technologies throughout your career with us.
Great minds, great potential: it all comes together at Virtusa. We value collaboration and the team environment of our company, and seek to provide great minds with a dynamic place to nurture new ideas and foster excellence.
Virtusa is an Equal Opportunity Employer. All applicants will receive fair and impartial treatment without regard to race, color, religion, sex, national origin, ancestry, age, legally protected physical or mental disability, protected veteran status, status in the U.S. uniformed services, sexual orientation, gender identity or expression, marital status, genetic information or on any other basis which is protected under applicable federal, state or local law.
Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government-issued ID during each interview. All candidates must be authorized to work in the USA.
Learn more
Awards and recognition
Syncing your Virtusa Information
Syncing Complete
Exporting your personal Virtusa brand items
Export Complete
Check your downloads folder for files and implementation instructions.
Assets are now available in your profile for future editing and use.
Loading your existing headshots
Please select any one of the images below
Downloading Secure Assets
Signing out