Cyber Security Automation Expert

This Cybersecurity Automation Expert role involves designing, building, and operating automations across Microsoft Sentinel SOAR and ServiceNow. The role focuses on incident response, risk reduction, and improving security posture. It requires a hands-on understanding of SOAR, ServiceNow, BI/ETL automations, and the SOC, working in a collaborative environment.

Requirements

• Design & build SOAR playbooks in Microsoft Sentinel to automate enrichment, triage, notifications, containment, and post-incident tasks.
• Automate ServiceNow workflows across ITSM/IR (Security Incident, Incident, Problem, Change), including case creation, field population, approvals, tasking, escalations, and bi-directional sync with SOC tools.
• Integrate ecosystems (EDR/XDR, firewalls, TI feeds, cloud platforms, identity stores, messaging, evidence stores).
• Own reliability and implement robust error handling, retries/idempotency, health checks, observability, and secrets management.
• Build BI/ETL automation with BIDS/SSIS or equivalent.
• Improve detection-to-response flow, enrich alerts, and streamline handoffs between SIEM, SOAR, and ServiceNow.
• Version control (Git), code reviews, CI/CD, change control, documentation, and runbooks.
• Clear communication with engineers, analysts, and stakeholders.

Benefits

• Competitive salary
• Opportunity for growth
• Collaborative work environment