Google - SOAR Engineer (Security)

Job description

Position Description:

Responsibilities :-
Lead the design and implementation of SOAR playbooks for security use cases, such as phishing incident response, vulnerability triage, or threat hunting on based on specific threat models.
Integration of SOAR with other security capabilities and tools such as SIEM, EDR, NDR threat intelligence platform, and ticketing systems.
Design testing and conduct validation of SOAR playbooks before deployment to live environment.
Write custom actions, scripts and/or integrations to extend SOAR platform functionality.
Monitor performance and perform timely actions to scale SOAR deployment, especially in a high-volume security environment.
Migration of existing assets from existing customer’s SIEM/SOAR to SecOps and assisting in implementing the SIEM/SOAR phase-out, phase-in approach.
Develop SOAR playbooks to provide case handling and Incident response as per triage needs
Creation of SOAR assets such as reports etc.
Guide on building or maturing cloud security programs and the implementation of tools and approaches used for improving cloud security.

Minimum Qualifications :-

8+ years experience in leading projects and delivering technical solutions related to security
SOAR experience in the areas of responsibility for at least 1 year
Coding experience in one or more general purpose languages.
Experience managing customer projects to completion, working with engineering teams, sales and partners.
Experience architecting, developing, or maintaining secure Cloud solutions.
Strong verbal and written communication skills and the ability to develop high-quality
Demonstrated experience on consulting or ownership of Security during high-speed environment migration for large-scale businesses with regulatory requirements
Strong verbal and written communication skills (English), and the ability to develop high-quality technical documentation and presentation materials.

Preferred Qualifications :-

Experience in Prevention, Detection and response to cyber threats
SIEM experience of 1 year in integration of log sources, extension of pre-built UDMs and creation of custom parsers, creation of dashboards , creation of custom rules using YARA-L 2.0 etc.
Knowledge and experience in SOAR platforms
Knowledge in GCP, including Google Cloud Professional Certifications (Security, Architect) and other industry certifications (CISSP, CCSP etc)
Experience in security governance, security risk management, security operations, security architecture, and/or cyber incident response programs for cloud.
Experience working with cloud architecture across a broad set of enterprise use cases and creating end-to-end solution architectures.
Excellent organizational, problem-solving, articulating and influencing skills.
Experience with industry compliance frameworks (e.g., PCI-DSS, ISO 27017/27018, GDPR, SOC).

Skills:

·  Cloud Computing
·  English
·  Google Cloud Platform
·  Incident Response
·  Security Architecture
·  Cloud Commerce

What you can expect from us:

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

Come join our team—one of the largest IT and business consulting services firms in the world.