Sr.

Professional Services Consultant - SOAR

A senior consultant specializing in the XSOAR platform, this role will encompass all the
responsibilities of a Professional Services Consultant while expanding into more
advanced and strategic areas. Senior consultants focus on highly customized projects,
demonstrate greater independence, and contribute to building and designing service
offerings around the XSOAR platform. Their extensive knowledge of scripting, APIs,
security use cases, system administration, combined with their ability to provide
innovative solutions, will be instrumental in driving success for our clients.

Job Role

 Lead and execute complex deployment projects involving XSOAR

 Collaborate closely with clients to understand their unique security challenges
and develop customized playbooks and automation workflows to address their
specific requirements.
 Serve as a SME for XSOAR, providing guidance and thought leadership to
customers and internal teams.
 Independently troubleshoot technical issues, identify root causes, and develop
creative solutions to overcome challenges.
 Contribute to the development of service offerings around XSOAR, including
methodologies, playbooks, and best practices.
 Leverage your in-depth knowledge of SIEM and SOAR and SOC practices to
assess customer needs, provide tailored recommendations, and assist in the
formulation of effective security strategies
 Collaborate closely with customers to understand their unique challenges and
objectives, translating them into actionable steps that enhance their security
posture
 Identify opportunities to enhance analyst alert handling through automation
 Produce technical documentation detailing SIEM and SOAR aspects of the
engagement

Candidate Profile

 8-10 years of hands-on experience in deploying and integrating SIEM and SOAR
solutions within enterprise to large enterprise-level environments
 Extensive experience in deploying and managing XSOAR, with a deep
understanding of its architecture, components, and capabilities.
 Proficiency in Python and/or JavaScript to develop advanced custom
integrations, automations and playbooks.
 Advanced knowledge of APIs and the ability to integrate XSOAR with diverse
security tools and infrastructure components.
 In-depth knowledge of cloud platforms (e.g., AWS, Azure, GCP) and their
security services.
 Expertise in incident response processes, including triage, investigation, and
remediation.
 Should have a clear understanding of the MITRE framework and how to
operationalize the same across multiple functions.
 Expertise in designing and implementing complex security use cases and
streamline security operations.
 Strong understanding of security concepts, frameworks, and compliance
standards, with the ability to provide strategic guidance and recommendations.
 Familiarity with a range of SIEM and SOAR technologies, such as Splunk,
QRadar Arcsight, Demisto etc.
 Proven experience in providing consultative services to end customers within the
realm of cybersecurity, particularly in SIEM/SOAR and SOC domains
 Demonstrated ability to comprehend customer requirements, analyze complex
security environments, and deliver strategic recommendations that align with
their goals
 Understanding of Security Analysis & Response, encompassing endpoint,
network, and cloud-based environments is a plus
 Proficient in comprehending and creating technical design documentation
 Extensive experience with Security Operations Centers (SOC) tooling and
processes
 Industry-recognized qualifications (CISSP, GIAC, SIEM/SOAR Vendor
Qualification, etc.), will be a plus