SOAR Engineer

About the role

The SOAR Engineer will be the technical backbone of malomatia Cyber Security Services, driving automation and efficiency across our Security Operations Center. You will design, implement, and maintain SOAR platforms to help both malomatia and our clients detect, investigate, and respond to cyber incidents faster.

Key responsibilities

• Act as the primary technical subject‑matter expert for security automation, orchestration, and playbook development.
• Design, deploy, and maintain SOAR platforms, handling content, change, version, and lifecycle management.
• Collaborate with SOC and security engineering teams to enhance existing automation and build resilient security solutions.
• Assess, design, and improve SOC processes, integrating automation through SOAR tools.
• Develop custom Python scripts and REST‑API integrations to automate detection and response workflows.
• Build pipelines to enrich logs and alerts, providing comprehensive visibility for analysts.
• Support client onboarding, serve as the main point of contact for managed security services, and mature SOC playbooks and use cases.

Required profile

• Relevant degree plus at least one SOAR certification.
• Minimum 3 years of hands‑on SOAR implementation/support or 5 years in cyber‑security engineering.
• Strong understanding of security architecture, incident‑response processes, and SOC workflows.

Required skills

• Palo Alto Cortex XSOAR, Splunk SOAR/Phantom, Microsoft Sentinel Automation/Logic Apps, IBM Resilient.
• Python scripting for automation.
• REST APIs, JSON, HTML/CSS, JavaScript, XML.
• Security orchestration, automation, and incident‑response expertise.