SOAR Engineer – Security Automation

About the role

We are seeking a skilled SOAR Engineer to design, develop and maintain automated security playbooks that enhance our Security Operations Center. The role focuses on integrating FortiSOAR with existing security tools and driving automation across incident response processes.

Key responsibilities

• Design and implement SOAR playbooks for use cases such as phishing response, vulnerability triage, and threat hunting.
• Integrate FortiSOAR with SIEM, EDR, NDR, threat‑intelligence platforms and ticketing systems.
• Develop, test and validate custom actions and scripts to extend SOAR functionality.
• Monitor and optimise SOAR performance to handle high‑volume security events.
• Collaborate with SOC analysts to improve incident‑response efficiency and provide documentation and knowledge transfer.

Required profile

• At least 1 year of hands‑on experience with FortiSOAR (design, development or deployment).
• Proficiency in Python for security automation.
• Strong experience with REST/SOAP APIs, JSON and XML.
• Familiarity with SIEM tools such as QRadar, Splunk and Microsoft Sentinel.
• Basic knowledge of cloud platforms AWS, Azure and GCP.
• Understanding of incident‑response processes and SOC operations.
• Effective communication and documentation skills.

Required skills

• FortiSOAR
• Python
• REST APIs
• SOAP APIs
• JSON
• XML
• QRadar
• Splunk
• Microsoft Sentinel
• AWS
• Azure
• GCP