Engineer - SOAR

Role Overview

As a SOAR Engineer at malomatia, you will play a pivotal role in monitoring, developing, and sustaining core cyber security services, enhancing operational efficiency. Your expertise will be key in enabling malomatia and its clients to promptly detect, comprehend, and react to cybersecurity incidents.

Key Responsibilities

• Serve as a technical authority for Security Automation, Orchestration, Playbooks, Python scripting for automation, API-driven automation, incident response lifecycle automation, and related security automation practices.
• Develop, implement, and manage standardized procedures for SOAR platform administration including design, deployment, and maintenance encompassing content, change, patch, version, and lifecycle management.
• Collaborate closely with the Security Operations Center (SOC) and Security Engineering teams to enhance automation capabilities and provide robust security solutions.
• Evaluate and refine SOC workflows and processes by integrating automation via SOAR tools to boost operational effectiveness.
• Deploy SOC automation, ensuring compatibility with existing detection and response technologies.
• Integrate various data sources and develop playbooks to streamline triaging and response to security incidents, thereby minimizing analysis time.
• Create customized scripts to automate detection and response workflows.
• Construct data pipelines for enriched logging and alerting to furnish SOC analysts with comprehensive situational awareness.
• Manage and evolve SOC playbooks, workflow automations, and use cases to improve maturity and efficiency.
• Support client onboarding and serve as the primary liaison for Managed Security Service clients during setup and transition phases.

Required Qualifications and Skills

• A relevant degree in a related field.
• Possession of one or more SOAR-specific certifications.
• At least 3 years of experience in SOAR implementation and support, or a minimum of 5 years in cybersecurity engineering.
• Proven hands-on experience with SOAR solutions such as Palo Alto Cortex XSOAR, Splunk SOAR (Phantom), Microsoft Sentinel Automation/Logic Apps, or IBM Resilient.
• Strong understanding of security architectures, tool integrations, API development, and automation strategies.
• Comprehension of incident response methodology covering detection, investigation, and response phases.
• Familiarity with SOC operational procedures and workflows.
• Proficient in Python scripting, along with working knowledge of REST APIs, JSON, HTML/CSS, JavaScript, and XML.
• Experience creating dashboards and reports tailored for cyber security operations.
• Understanding of operating system internals for both Linux and Windows.
• Experience in building or customizing integrations and playbooks involving security technologies like Palo Alto/Fortinet firewalls, CrowdStrike/SentinelOne EDR, Splunk/QRadar/Sentinel SIEM, and ServiceNow/Jira ticketing systems.
• Experience integrating SOAR platforms with ITSM tools such as Jira and ServiceNow.
• Strong analytical and problem-solving skills with the capacity to operate independently.
• Excellent written and oral communication skills.

Preferred Experience

• Previous work experience in the regional market.
• Background in Managed Security Service Providers (MSSP) or Managed Detection and Response (MDR) environments.

About malomatia

Malomatia is a leading IT services and solutions company based in Qatar, integrating local and international expertise to provide innovative, comprehensive technological solutions empowering clients to meet strategic objectives.

Since 2008, malomatia has been a driving force in Qatar's digital transformation, delivering ISO-certified IT services across public and private sectors including cloud, cybersecurity, AI, and contact center technologies.

Our vision is to be the dependable digital transformation partner in Qatar, fostering industry disruption and future development through technology and talent.

We operate with core values such as ownership, integrity, empathy, teamwork, transparency, agility, excellence, trust, and innovation, fueling our commitment to cultivating a smarter society.