SOC Automation

About the role

We are looking for a Junior SOC Automation Engineer who can actively contribute to building and maintaining automation workflows within our Security Operations Center. You will work at the intersection of cybersecurity and engineering — turning repetitive analyst tasks into reliable, automated pipelines using real security tooling and scripting.

What you'll do

• Build and maintain automation playbooks for alert triage, IOC enrichment, ticket creation, and escalation workflows using platforms like n8n, Tines, or XSOAR
• Develop Python/PowerShell scripts for API integrations, log parsing, and automated response actions
• Integrate security tools including SIEM, EDR, threat intel platforms (VirusTotal, AbuseIPDB), and ticketing systems (Jira, ServiceNow) via REST APIs
• Parse and normalize data across JSON, Syslog formats for use in automation pipelines
• Handle webhook configurations and event-driven triggers for real-time automation

What you need

• Open to freshers
• SIEM
• Linux
• Python
• JIRA
• REST APIs
• ServiceNow
• Any graduate

Good to have

• Incident response
• Splunk
• Git
• Ticketing tools
• JavaScript
• EDR