Resident Consultant (XSOAR Specialist)

Summary

This role serves as the primary technical and operational Subject Matter Expert (SME) for Automation, Integration, and Playbook development, collaborating with multiple teams to ensure successful outcomes.

Main Responsibilities

• Provide technical and thought leadership, optimizing processes and systems.
• Support pre-sales, sales, and business development for new and existing services.
• Collaborate with internal peers and external stakeholders to implement and deliver cyber defense services.
• Assist in the Service Transition process, ensuring smooth transitions for customers and infrastructure into operations.
• Work proactively and collaboratively with peers for mutually beneficial outcomes.
• Support the detection, mitigation, containment, and response to cyber security incidents through effective integration and capabilities of assets.
• Create, optimize, and document processes, procedures, and workflows; track and report SLAs, KPIs, and OLAs.
• Initiate, support, and manage incidents, problems, risks, and compliance activities; be available 24/7 as needed.

Key Requirements

• Degree in Computer Science, Information Systems, Electrical Engineering, or a related field.
• Depth of skills in at least three areas: Security Controls Operations, Cyber Incident Response, Cyber Security Detection, Managed Services Integration, Cyber Threat Intelligence, or Threat Hunting.
• 4+ years of experience in PAN Cortex XSOAR (Demisto SOAR).
• Working knowledge of cyber threats, threat actors, TTPs, and threat mitigation in on-premises, cloud, and distributed contexts.
• ITIL accreditation or relevant experience.
• Expert skills across SIEM, NGFW, CTI, WAF, Office 365, and service management tools.
• Experience designing, implementing, maintaining, and optimizing custom playbooks for the detection, protection, containment, and mitigation of cyber security threats and incidents.
• Strong scripting and integration skills in Python, Go, Kusto/KQL, and PowerShell.
• Expert knowledge of information security technologies, IT systems, and interfaces used for integration, automation, and orchestration.

Certifications

• Mandatory: PCSAE or PCSE.

Other Details

• Team Structure: Collaboration with Cyber Defense, Platforms & Architecture, and Managed Controls teams.